topic Re: Searching Script For Panorama Traffic Logs in General Topics

Searching Script For Panorama Traffic Logs

Doug_Hogue — Sun, 01 Jan 2017 00:30:23 GMT

I have a need to search my Panorama traffic logs looking for 1000's of source IPs, engress on the outside zone. I would like to write a bash script to actually read through the logs for the IP's. Manually searchinf for this large amount of IPs is not practical. Has any one done this? Any ideas how to start? I can SSH into the Panorama but no idea where the files are or the names. Also suspect I will not be able to run any type of scripting on the Panorama box but will have to exprt the logs files to another box. Any help would be appreicated.

Re: Searching Script For Panorama Traffic Logs

VinceM — Tue, 03 Jan 2017 09:28:38 GMT

Hi,

Scriptinh in the Panoram should be not the good approach.

Maybe have a look on https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld it can help your.

Seem to be very powerfull.

Rgds

Re: Searching Script For Panorama Traffic Logs

glastra1 — Tue, 03 Jan 2017 20:57:09 GMT

You could create an script use the XML api the get the logs,

https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api/pan-os-xml-api-request-types/retrieve-logs-api

If you have further questions you can use our dev forum,

https://live.paloaltonetworks.com/t5/APIs/bd-p/TechnologiesSDKsDiscussions

regards,

Gerardo.