topic Re: Automated Correlation Engine - Will it look at log entries from before the upgrade to PAN-OS 7? in General Topics https://live.paloaltonetworks.com/t5/general-topics/automated-correlation-engine-will-it-look-at-log-entries-from/m-p/18663#M13608 <HTML><HEAD></HEAD><BODY><P>From what I can tell - it appears that it will only look at log events entered after the upgrade to PAN-OS 7.&nbsp; The reason I say this is that I have a correlated events entry for a host that was 'beaconing' to a known malware URL(after the upgrade) but similar url events that already existed did not result in a new entry.</P></BODY></HTML> Fri, 07 Aug 2015 19:19:47 GMT bgirdner 2015-08-07T19:19:47Z Automated Correlation Engine - Will it look at log entries from before the upgrade to PAN-OS 7? https://live.paloaltonetworks.com/t5/general-topics/automated-correlation-engine-will-it-look-at-log-entries-from/m-p/18662#M13607 <HTML><HEAD></HEAD><BODY><P>I have logs going to Panorama from Firewalls running PAN-OS 6.1.5, I recently upgraded Panorama from 6.1.5 to 7.0.1.&nbsp; Does anyone know if it will look at the old log events in the correlation engine or if it will only look at new ones coming in?</P><P></P><P>Any way to test and confirm that the automated correlation engine is working?</P></BODY></HTML> Fri, 07 Aug 2015 16:35:25 GMT https://live.paloaltonetworks.com/t5/general-topics/automated-correlation-engine-will-it-look-at-log-entries-from/m-p/18662#M13607 bgirdner 2015-08-07T16:35:25Z Re: Automated Correlation Engine - Will it look at log entries from before the upgrade to PAN-OS 7? https://live.paloaltonetworks.com/t5/general-topics/automated-correlation-engine-will-it-look-at-log-entries-from/m-p/18663#M13608 <HTML><HEAD></HEAD><BODY><P>From what I can tell - it appears that it will only look at log events entered after the upgrade to PAN-OS 7.&nbsp; The reason I say this is that I have a correlated events entry for a host that was 'beaconing' to a known malware URL(after the upgrade) but similar url events that already existed did not result in a new entry.</P></BODY></HTML> Fri, 07 Aug 2015 19:19:47 GMT https://live.paloaltonetworks.com/t5/general-topics/automated-correlation-engine-will-it-look-at-log-entries-from/m-p/18663#M13608 bgirdner 2015-08-07T19:19:47Z