topic Re: Problem exporting logs in General Topics

Problem exporting logs

SOC_CSG — Wed, 26 Jun 2013 16:21:49 GMT

Hi everybody

I'm trying to export a traffic monitor log but I always have the same problem. If I try to export a week or a single day I only get about 7-8 hours and a file of 16Mbs with no more than 50000 or 60000 rows. I have modified the "Logging and Reporting Settings" to increase the "Max Rows in CSV Export" to 1 million.

My device is a PA-2050 with PanOS 4.1.6.

Best regards

Gonzalo Arroyo

Re: Problem exporting logs

sraghunandan — Wed, 26 Jun 2013 18:25:23 GMT

There is a bug open in 4.1 branch wrt to this even though the max lines are set to 1048576 sometimes only 60-65k lines would show up else browser would return Page cannot be displayed

refer to the bug: 28222 fixed in 5.0.0

Re: Problem exporting logs

sraghunandan — Wed, 26 Jun 2013 18:30:43 GMT

For a workaround you can do the following:-

enable logging on putty.

> set cli pager off

> show log traffic start-time equal 2012/09/01@10:00:00 end-time equal 2012/09/03@10:00:00

this command would dump all the logs for that period.

Re: Problem exporting logs

_slv_ — Thu, 27 Jun 2013 09:58:55 GMT

I'm also using log export. I stared from FTP export and now I have SCP export.

Logs are quite big - do you think that we should request option to export zip compressed logs?

Regards

Slawek

Re: Problem exporting logs

mschuricht — Thu, 27 Jun 2013 15:38:41 GMT

It seems like the best solution when there are lots of logs is to avoid using a scheduled export and instead focus on using syslog forwarding plus collection.

Re: Problem exporting logs

SOC_CSG — Thu, 27 Jun 2013 15:49:14 GMT

Thanks everybody for the answer. I manage to export the log with cli (thanks to sraghunandan :smileygrin:) maybe later i will upgrade to 5.0 and try again with GUI.

Best regards

Re: Problem exporting logs

Retired Member — Thu, 27 Jun 2013 22:53:30 GMT

Hello

PANOS 5.0 can export logs of 1048576 lines as well when I tested. About 300Mbytes logs were exporting on WEB-UI.

Thanks.

Regards,

Roh