topic Re: How to find out the IPS/IDS logs. in General Topics https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36936#M27106 <HTML><HEAD></HEAD><BODY><P>can you suggest where we can see only IPS logs for audit purpose?</P></BODY></HTML> Tue, 30 Dec 2014 11:23:40 GMT NickySorot 2014-12-30T11:23:40Z How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36933#M27103 <HTML><HEAD></HEAD><BODY><P>Hi Friends,</P><P></P><P>How to find out the IPS/IDS/Anti-spoofing Logs with CLI or GUI.</P><P></P><P>Regards</P><P>Satish</P></BODY></HTML> Tue, 30 Dec 2014 11:03:04 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36933#M27103 Satish 2014-12-30T11:03:04Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36934#M27104 <HTML><HEAD></HEAD><BODY><P>Hi Satish</P><P></P><P>You can find it under Monitor-&gt; Threat tab.</P></BODY></HTML> Tue, 30 Dec 2014 11:07:49 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36934#M27104 gbogojevic 2014-12-30T11:07:49Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36935#M27105 <HTML><HEAD></HEAD><BODY><P>And CLI:</P><P></P><P>&gt; show log threat</P><P></P><P>Regards,</P><P>Guillermo.</P></BODY></HTML> Tue, 30 Dec 2014 11:14:41 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36935#M27105 Retired Member 2014-12-30T11:14:41Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36936#M27106 <HTML><HEAD></HEAD><BODY><P>can you suggest where we can see only IPS logs for audit purpose?</P></BODY></HTML> Tue, 30 Dec 2014 11:23:40 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36936#M27106 NickySorot 2014-12-30T11:23:40Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36937#M27107 <HTML><HEAD></HEAD><BODY><P><A href="https://live.paloaltonetworks.com/u1/12079">panos</A> <A href="https://live.paloaltonetworks.com/u1/19491">HULK</A> <A href="https://live.paloaltonetworks.com/u1/17985">Steven Puluka</A> <A href="https://live.paloaltonetworks.com/u1/19490">hshah</A> please suggest !!!</P></BODY></HTML> Tue, 30 Dec 2014 11:31:43 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36937#M27107 Satish 2014-12-30T11:31:43Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36938#M27108 <HTML><HEAD></HEAD><BODY><P>can you check that</P><P></P><P><A href="https://live.paloaltonetworks.com/docs/DOC-1334">What are the Threat Log Values for Threat ID and Direction</A></P><P></P><P>you can filter the threat logs then.</P></BODY></HTML> Tue, 30 Dec 2014 12:39:47 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36938#M27108 Retired Member 2014-12-30T12:39:47Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36939#M27109 <HTML><HEAD></HEAD><BODY><P>&gt; show log threat start-time equal 2014/10/01@10:00:00 end-time equal 2014/12/30@10:00:00 suppress-threatid-mapping equal no csv-output equal no direction equal backward</P><P></P><P>Additional suggestions:</P><P>Adjust your start-time and end-time</P><P>Remove 'direction equal backward' if your want to make newest event show last</P><P>Use "<SPAN style="font-size: 13.6000003814697px;">csv-output equal yes" if you want to export to a spreadsheet</SPAN></P><P>Use " &gt; set cli pager off " to avoid being asked to press spacebar (useful for logging TTY session output at one strike)</P></BODY></HTML> Tue, 30 Dec 2014 22:52:43 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36939#M27109 mivaldi 2014-12-30T22:52:43Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36940#M27110 <HTML><HEAD></HEAD><BODY><P>I'm not sure I follow exactly what kind of report you are looking for.</P><P></P><P>As a general rule, I think the ACC tab is the best place to drill into threat activity and reporting.&nbsp; You have a lot of filtering options to narrow down your area of interest.</P><P></P><P>The monitor tab and threat monitor can also be a good top level view to understand where you want to drill into the data using the monitor tab reporting functions.</P></BODY></HTML> Thu, 01 Jan 2015 14:03:34 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36940#M27110 pulukas 2015-01-01T14:03:34Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36941#M27111 <HTML><HEAD></HEAD><BODY><P>Thanks all for reply.</P><P></P><P>I think IPS, IDS, anti-virus, anti-spyware and vulnerability combined of all is called threat logs.</P><P></P><P>Regards</P><P>Satish</P></BODY></HTML> Fri, 02 Jan 2015 07:09:02 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36941#M27111 Satish 2015-01-02T07:09:02Z Re: How to find out the IPS/IDS logs. https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36942#M27112 <HTML><HEAD></HEAD><BODY><P>That is correct <A href="https://live.paloaltonetworks.com/u1/27418">Satish</A></P><P></P><P>Regards,</P><P>Guillermo.</P></BODY></HTML> Fri, 02 Jan 2015 07:55:08 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-find-out-the-ips-ids-logs/m-p/36942#M27112 Retired Member 2015-01-02T07:55:08Z