topic Re: Auto configuration email report in General Topics

Auto configuration email report

AhmadFarouq — Thu, 15 Mar 2018 04:36:37 GMT

Hi all

I would like to do automatic daily report from Panorama. this report should include all changes done by administrators is that possible and how ?

Re: Auto configuration email report

reaper — Thu, 15 Mar 2018 10:23:34 GMT

hi @AhmadFarouq

Reports can only be created for traffic related logs, system logs can be exported to a SIEM or other solution that can build these reports

Re: Auto configuration email report

BPry — Thu, 15 Mar 2018 14:38:49 GMT

@AhmadFarouq,

I find it helpful to have a Log Settings 'Configuration' entry configured so that anything that matches the filter ( cmd eq commit ) generates an email to myself. This makes it so that I at least know when a commit was made and who actually did it.

If you want to go a step further this is also something that you can work into a script; where once that alert is generated it triggers a script that pulls the running-config and compares it to the last running-config and sends you whats changed between the two.

Re: Auto configuration email report

Remo — Thu, 15 Mar 2018 15:08:33 GMT

Hi @AhmadFarouq

In this blogpost you can find some help on how to automate such tasks with the config logs: https://live.paloaltonetworks.com/t5/Community-Blog/The-Power-of-XML-API/ba-p/202789