search traffic logs by vsys in CLI

Jinx — Tue, 11 Dec 2012 17:04:42 GMT

Does anyone know how to specify your traffic logs by vsys and add multiple search parameters of the same type like you can in the gui? We are running PanOS 4.1.7. Notice that the app option does not show up anymore and and there is no vsys option.

PA-1(active)> show log traffic action equal deny app not-equal not-applicable

+ csv-output csv-output

+ direction direction

+ dport dport

+ dst dst

+ dstuser dstuser

+ end-time end-time

+ from from

+ query query

+ receive_time receive_time

+ rule rule

+ sport sport

+ src src

+ srcuser srcuser

+ start-time start-time

+ to to

| Pipe through a command

Re: search traffic logs by vsys in CLI

mikand — Wed, 12 Dec 2012 12:55:59 GMT

I cant find it either when looking through the CLI manual for PANOS 4.1.

It seems that only the alarm facility has the vsys option to filter on when doing show log:

> traffic — Displays traffic logs

+ action — Action equals or does not equal allow, deny, or drop

+ app — Equals or does not equal value

+ csv-output — Equals CSV output (no or yes)

+ direction — Backward or forward direction

+ dport — Destination port equals or does not equal (0-65535)

+ dst — Destination IP address in or not in (x.x.x.x/y or IPv6/netmask)

+ dstuser — Equals destination user name

+ end-time — Ending date and time YYYY/MM/DD@hh:mm:ss (e.g., 2011/08/01@10:00:00)

+ from — Equals or does not equal value

+ query — Equal to query value

+ receive_time — Receive time in the last specified time period (press <tab> for list)

+ rule — Equals or does not equal rule value

+ sport — Source port equals or does not equal (0-65535)

+ src — Source IP address in or not in (x.x.x.x/y or IPv6/netmask)

+ srcuser — Equals source user name

+ start-time — Starting date and time YYYY/MM/DD@hh:mm:ss (e.g., 2011/08/01@10:00:00)

+ to — Equals or does not equal value

topic search traffic logs by vsys in CLI in General Topics

search traffic logs by vsys in CLI

Re: search traffic logs by vsys in CLI