topic Re: Export logs from PA7050 to Window Log Server in General Topics

Export logs from PA7050 to Window Log Server

EdwinKhng — Mon, 02 Mar 2020 05:29:26 GMT

Hi Guys,

Any possibility we can export daily logs from PA7050 to external windows log server through SCP or FTP? Been told there is a limitation for PA7050 to do so because the log database is too large for export or import. Any possible can do it by scripting?

Thank you.

Re: Export logs from PA7050 to Window Log Server

SutareMayur — Mon, 02 Mar 2020 06:41:22 GMT

@EdwinKhng yes there are limitations on 7050 model. Command "scp export logdb" will only export system, config and alarm logdbs only but not traffic logs.

You can configure syslogs server and forward logs to it.

Hope it helps!

Mayur

Re: Export logs from PA7050 to Window Log Server

EdwinKhng — Mon, 02 Mar 2020 10:14:57 GMT

@SutareMayur What if I want to export the traffic logs?

Re: Export logs from PA7050 to Window Log Server

SutareMayur — Mon, 02 Mar 2020 10:37:03 GMT

@EdwinKhngAre you managing it from Panorama?

If yes, please check https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClT3CAK.

Mayur

Re: Export logs from PA7050 to Window Log Server

Vikashh — Wed, 04 Mar 2020 16:04:06 GMT

Yes, there are limitations on the 7000 series gateways.

Re: Export logs from PA7050 to Window Log Server

OtakarKlier — Thu, 05 Mar 2020 18:01:55 GMT

Hello,

Your best bet is to send the logs via syslog and have the receiving machine ingest them that way.

Regards,

Re: Export logs from PA7050 to Window Log Server

EdwinKhng — Fri, 06 Mar 2020 01:41:56 GMT

Yes. Managing by panorama, however, the panorama also not enough storage to store all the logs. So to save budget, we eye looking at the external syslog server.

Re: Export logs from PA7050 to Window Log Server

EdwinKhng — Fri, 06 Mar 2020 01:44:31 GMT

Hi,

I actually tried, however, it able to export to syslog server successful but not all, only 400Mb, however, I tried the same method on another PA5250 and it able to export full logs over. I assume the method was actually working, however, due to the lograte limitation on PA7k series, it only able to export 400Mb logs which could be only 5~10% for 24 hours.

Regards,

Edwin