topic Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format? in General Topics

How to export all logs ( eg 5 moths detailed) to CSV or any other format?

Gururaj — Fri, 13 Dec 2013 09:35:42 GMT

Hi All,

How to export all logs ( eg 5 moths detailed) to CSV or any other format?

From monitor -> logs -> traffic i tried to export to CSV but it showing only for one day, is there any way to export all logs?

In monitor -> Reports it showing logs from From 4th Feb 2013 to till date, bur when i tried to export to CSV from logs -> traffic it is showing only one day logs.

Regards,

Gururaj

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

_slv_ — Fri, 13 Dec 2013 10:27:23 GMT

I can't help you, but I have related question.

How to export system log? It's impossible using Scheduled log export. Isthere any other way to export it CSV or any other format?

With regards

SLawek

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

cstancill — Fri, 13 Dec 2013 11:58:03 GMT

SLV,

You can export the system logs from the Monitor tab. You should see an icon in the upper right-hand corner that looks like the Excel icon. Clicking this will allow you to export the logs to a CSV file.

Craig

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

cstancill — Fri, 13 Dec 2013 12:02:11 GMT

Guraj,

You should be able to export your logs using the following CLI command:

scp export log traffic

The above command will work with tftp as well and has options (use ? after 'scp export log traffic') for the start time and end times to export. It is important to note that you may not have 5 months of logs on the device, depending on available storage and your logging configuration.

Craig

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

_slv_ — Fri, 13 Dec 2013 12:43:33 GMT

Hi Craig

Is this only possibility to do this? I prefer to use scheduler or CLI.

Anyway thank You so much, I missed this option.

Regards

Slawek

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

cstancill — Fri, 13 Dec 2013 13:46:07 GMT

Slawek,

No problem! The 'scp export log traffic' is a CLI command, so you could use something like an expect script to schedule downloads. You could also use the XML API to fetch a maximum of 5000 logs (using /api/?type=log&log-type=traffic&nlogs=).

Craig

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

_slv_ — Fri, 13 Dec 2013 17:01:12 GMT

Craig, are You sure that in traffic logs are data from system log?

From CLI

admin@PA> scp export log

> data data

> threat threat

> traffic traffic

> url url

> wildfire wildfire

^^^^ this is the same like from GUI.

SLawek

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

cstancill — Sat, 14 Dec 2013 12:00:49 GMT

Sorry, no. System logs would only be available from the GUI (I confused the posters in this thread, my mistake).

Craig

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

hyadavalli — Sat, 14 Dec 2013 12:11:21 GMT

Hello Gururaj,

Palo alto can export only 65535 lines by default in csv format.

You can modify this under Device->Setup->Management->'Logging and reporting settings'->Max Rows in CSV format.

You can specify up to 2Million as my knowledge.

Regards,

Hari Yadavalli

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

VinceM — Sat, 14 Dec 2013 14:14:13 GMT

Hi,

Hyadavalli you're right but for me if you specify 2Million, for me it will be not take in concideration (in the past it make sense because there were a limit of 65000 line per Excel docuement)

But what you can do is export the first 65000 line, then change the date in your palo then export again ..

Not the lceanest way to do but it works 🙂

After that keep in mind to configure fowarding profile per rule 🙂 - If you are end user, ask your reseller, there is easy way to do that through migration tool.

Hope clear

Re: How to export all logs ( eg 5 moths detailed) to CSV or any other format?

_slv_ — Sun, 15 Dec 2013 16:00:11 GMT

Hi Vince

According to Excel specifications and limits - Excel - Office.com

65000 limitation is for .xls file (for Office XP and older). Nevers version (.xlsm) has Worksheet size 1,048,576 rows by 16,384 columns.

Regards

Slawek