topic Re: SCP Export Query from Panorama in General Topics

SCP Export Query from Panorama

Ash2k — Thu, 22 Jun 2017 15:46:27 GMT

I'm having a bit of trouble with the format for exporting traffic logs from Panorama for a particular user. I've setup the CLI command as below but the resulting csv file is empty.

scp export log traffic query "user.src equals <username>" ...

scp export log traffic query "username equals <username>" ...

I've also tried "equal" instead of "equals" but not having much luck. Does anyone know what the correct format should be to query the username?

Thanks,

Ash

Re: SCP Export Query from Panorama

BPry — Thu, 22 Jun 2017 16:33:38 GMT

You can format the query exactly how you would if you ran it on the GUI, so your query would actually be

scp export log traffic query equal " ( user.src eq 'domain\user' ) " ...

Re: SCP Export Query from Panorama

Ash2k — Fri, 23 Jun 2017 08:17:17 GMT

Thanks BPry, that great to know and has worked.