topic Re: User ID Agent in General Topics

User ID Agent

IgorZhukovsky — Wed, 05 Sep 2018 16:20:44 GMT

Where the userid agent save log file ?

We want to start audit when User ID update task failed on PA

Is there a possibility to move the logs of userid to the siem / syslog server

BPry — Wed, 05 Sep 2018 18:34:10 GMT

less mp-log useridd.log (Logs for the userid process)

less mp-global userinfo.xml (Current Recorded Users)

IgorZhukovsky — Wed, 05 Sep 2018 19:32:37 GMT

you command is from Paloalto fw

I need to forward user id agent server logs to syslog

we want to troubleshoot logs that no forward to user id agent > to SYSLOG/ OR QRADAR

we have 16 DC that forwarding security logs to user id agent server and we have problems

asilliker — Thu, 06 Sep 2018 23:58:23 GMT

The default location would be C:\Program Files (x86)\Palo Alto Networks\User-ID Agent\UaDebug.log