topic Re: Export Logs and Read Exported Logs in PA? in General Topics

Export Logs and Read Exported Logs in PA?

mike_cc — Tue, 11 Mar 2014 21:30:44 GMT

I need some clarification on exporting logs and how to read the logs (if possible) in PA.

1) From reading the discussion forums I see that SCP export only works if the target is a *nix system.

a) Is this correct?

b) Why isn't this in the help file? I've been trying to use WinSSHD.

2) I realize the exported logs could be large (several gigs).

a) Once exported, how do I read the logs? Can I use my firewall to read an external log file?

b) If I can't use my firewall, are the log files easily imported and manipulated using Excel or will I need to put them in a database and build queries?

3) My implementation of PA is small.

a) It seems that Panorama is the way to go for reporting on and retaining log files, but does it make sense for a small implementation?

b) Is there a PanoramaLite version of any kind that would make sense (cheaper) for smaller environments?

Thanks,

Mike

Re: Export Logs and Read Exported Logs in PA?

Phoenix — Tue, 11 Mar 2014 21:41:01 GMT

Hello mike_cc

Generally I have seen scp export for logs are used only to back up logs or load it after any changes being done on the device and so on.

Yes the file which is exported is generally exported to a firewall and hence its not readable in excel or so on. As Panos works on *nix base it is in the same format.

So it can be exported as a file and loaded back to same firewall or any firewall to see the logs back again on the firewall. I have not seen any panorama lite as such my best suggestion is to implement Syslog and forward the required logs on an external server.

Thanks

Re: Export Logs and Read Exported Logs in PA?

mike_cc — Thu, 13 Mar 2014 14:00:55 GMT

Thanks for the information. I think I'll look into Panorama and go from there.

Mike