<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to check/find persistent sessions in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327614#M83368</link>
    <description>&lt;P&gt;When logging at session end, exporting logs does not help as a persistent session will not be in the log.&lt;/P&gt;&lt;P&gt;Session browser does not show more than 1024 sessions and can't export to csv and can't filter by date.&lt;/P&gt;&lt;P&gt;So i think best would be from cli but i i don't know how.&lt;/P&gt;&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27580"&gt;@OtakarKlier&lt;/a&gt;&amp;nbsp;Does this make sense.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 12 May 2020 19:32:27 GMT</pubDate>
    <dc:creator>raji_toor</dc:creator>
    <dc:date>2020-05-12T19:32:27Z</dc:date>
    <item>
      <title>How to check/find persistent sessions</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327574#M83362</link>
      <description>&lt;P&gt;How can we check from CLI sessions that have been running for hours or days.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 May 2020 17:21:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327574#M83362</guid>
      <dc:creator>raji_toor</dc:creator>
      <dc:date>2020-05-12T17:21:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to check/find persistent sessions</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327592#M83365</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;While you can do something like show sessions via the cli. I prefer the GUI in this since you can just export the data as a csv and manipulate the data that way, e.g. sort by start. However I'm sure someone can chime in with proper cli commands for this.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Tue, 12 May 2020 18:33:41 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327592#M83365</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2020-05-12T18:33:41Z</dc:date>
    </item>
    <item>
      <title>Re: How to check/find persistent sessions</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327614#M83368</link>
      <description>&lt;P&gt;When logging at session end, exporting logs does not help as a persistent session will not be in the log.&lt;/P&gt;&lt;P&gt;Session browser does not show more than 1024 sessions and can't export to csv and can't filter by date.&lt;/P&gt;&lt;P&gt;So i think best would be from cli but i i don't know how.&lt;/P&gt;&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27580"&gt;@OtakarKlier&lt;/a&gt;&amp;nbsp;Does this make sense.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 May 2020 19:32:27 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327614#M83368</guid>
      <dc:creator>raji_toor</dc:creator>
      <dc:date>2020-05-12T19:32:27Z</dc:date>
    </item>
    <item>
      <title>Re: How to check/find persistent sessions</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327619#M83371</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;That is a good question. Perhaps someone else could jump in and help out. You can sort he session browser by start date/time, maybe that can help to narrow down your search?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Tue, 12 May 2020 19:46:56 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327619#M83371</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2020-05-12T19:46:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to check/find persistent sessions</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327916#M83399</link>
      <description>&lt;P&gt;try min-age and min-kb options in show session&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;+ min-age minimum age in seconds&lt;BR /&gt;+ min-kb minimum KB of byte count&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;gt; show session all filter min-age&lt;BR /&gt;&amp;lt;value&amp;gt; &amp;lt;1-4194304&amp;gt; minimum age in seconds&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;for example&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;show session all filter min-age 86400&amp;nbsp; to find all sessions that has not aged out for over 86400 seconds (1 day) when you run the command.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;That should provide the list of session which has not aged out for over X seconds, or use min-kb to look for large transfer.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;you can also use the API to get all the session detail out as well,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://lb-srtr-1/api/?type=op&amp;amp;cmd=%3Cshow%3E%3Csession%3E%3Call%3E%3Cfilter%3E%3Cmin-age%3E%3C%2Fmin-age%3E%3C%2Ffilter%3E%3C%2Fall%3E%3C%2Fsession%3E%3C%2Fshow%3E&amp;amp;REST_API_TOKEN=2014902207" target="_rest_api"&gt;/api/?type=op&amp;amp;cmd=&amp;lt;show&amp;gt;&amp;lt;session&amp;gt;&amp;lt;all&amp;gt;&amp;lt;filter&amp;gt;&amp;lt;min-age&amp;gt;&amp;lt;/min-age&amp;gt;&amp;lt;/filter&amp;gt;&amp;lt;/all&amp;gt;&amp;lt;/session&amp;gt;&amp;lt;/show&amp;gt;&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 14 May 2020 13:21:43 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-check-find-persistent-sessions/m-p/327916#M83399</guid>
      <dc:creator>nextgenhappines</dc:creator>
      <dc:date>2020-05-14T13:21:43Z</dc:date>
    </item>
  </channel>
</rss>

