topic How to generate a configuration change report in General Topics

How to generate a configuration change report

vchanal — Mon, 02 Jun 2014 18:12:28 GMT

Hi,

I would like to generate weekly a report with all the changes administrators made during the week.

I would like to export information I can see on the "Configuration Logs" with "Before change" and "After change".

If generate a csv file, I dont have the detail anymore, only date, admin name, and action type.

If I execture "show log config", I don't have details either.

How to get the complete configuration log by CLI or API or how to generate this type of report?

Thanks.

Best regard.

Re: How to generate a configuration change report

gwesson — Mon, 02 Jun 2014 19:41:08 GMT

I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:

http://screencast.com/t/SANiPheT3yPT

If you're using a different version, it may have been a feature added to later code.

Hope this helps,

Greg

Re: How to generate a configuration change report

vchanal — Mon, 02 Jun 2014 19:45:13 GMT

Whow thank you for your answer.

Im on PAN5 for my research but my customer will be in PAN6, so it's such a good news.

Could you check if you have this level of detail with this CLI command : show log config csv-output equal yes?

Thanks you so much.

Vincent.

Re: Re: How to generate a configuration change report

gwesson — Mon, 02 Jun 2014 19:58:36 GMT

Here's the detail I get for that same event using that command (edited to remove some internal details):

1,2014/05/12 08:05:42,...,CONFIG,0,0,...,...,,edit,admin,Web,Succeeded, deviceconfig setting management common-criteria-alarm-generation,3298,0x0

So it looks like the CLI command only includes the path rather than the before & after detail information as the actual export to CSV provides.

Best regards,

Greg

Re: How to generate a configuration change report

vchanal — Tue, 03 Jun 2014 08:55:42 GMT

Thank you Gwesson.

Its really a shame that this command doesn't provide all the information you can have with the GUI.

I could have request that command with API to get the report I look for.

I have to find something else.

Thanks.

Best Regard.

Vincent.