topic Re: Delete logs and ACC monitor data in General Topics

Delete logs and ACC monitor data

cityofkingsland — Mon, 20 Dec 2010 16:20:16 GMT

After testing out PA we wanted to remove all testing logs and data that was produced during the labbing phase. What would be the CLI command to delete all the data without having to do a private-data-reset? Want to keep all the current settings, but remove data from ACC and other logs so we can start fresh.

Re: Delete logs and ACC monitor data

mderksen — Mon, 20 Dec 2010 16:25:06 GMT

With the clear command you can wipe information from the system. Try the clear log command to clear the information in the ACC and log files.

Marcel

Re: Delete logs and ACC monitor data

rob — Wed, 30 Mar 2011 12:27:15 GMT

I found out that on PAN-OS 4 after clearing all logs:

> acc ACC database

> alarm Alarm logs

> config Configuration logs

> hipmatch Hipmatch database

> system System logs

> threat Threat logs

> traffic Traffic logs

it seems that all logs are removed.... but.... they are not all

When I go to Monitor tab, click on Reports, Select Soures from Traffic Reports, then I see al history, sorted on date. So all IP's including usernames is shown. When you click on it, it shows the ACC, fortunately there is no information shown.

Please fix this, because clearing logs is much faster then performing a Private data reset before taking de NFR to a customer for a PoC.

Re: Delete logs and ACC monitor data

kbrazil — Wed, 30 Mar 2011 16:40:14 GMT

Your best bet might be to create a template of a simple config you want to use for rollouts and then do a "request system private-data-reset" (or factory reset). Then upload your template config.

Clearing the logs does not clear the old reports in the system. To do that you can use the "delete report ..." command. I'm not sure if you can use wildcards or if you need to delete each one individually.

Cheers,

Kelly