topic Re: opcmdhistory log missing in PanOS9.1 in General Topics

opcmdhistory log missing in PanOS9.1

batd2 — Thu, 25 Feb 2021 19:40:58 GMT

I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1. It was there in 9.0 and previous versions.

Do you know why it changed and if the information is in another log file?

I was using it for troubleshooting and detecting cli commands executed by other admins, API calls, etc.

Re: opcmdhistory log missing in PanOS9.1

reaper — Fri, 26 Feb 2021 12:17:26 GMT

starting from PAN-OS 9.1.2 you can find the CLI history in req_stats.log

> less mp-log req_stats.log

Re: opcmdhistory log missing in PanOS9.1

batd2 — Mon, 01 Mar 2021 10:57:29 GMT

Thanks for your quick response @reaper

It is very useful to know about the new "req_stats.log" file.

It looks like "req_stats.log" has the GUI and API commands, which is very helpful, but it does not seem to be showing a log of the CLI commands.

Re: opcmdhistory log missing in PanOS9.1

reaper — Mon, 01 Mar 2021 15:34:29 GMT

it is, but in API format

here's "show system info"

2021-03-01 16:31:14.880 | 2021-03-01 16:31:14.884 | 2021-03-01 16:31:15.195 | 2021-03-01 16:31:15.195 | 1 | 536.87 msecs | 1 | <request cmd="op" cookie="1" uid="1"><operations><show><system><info/></system></show></operations></request>

Re: opcmdhistory log missing in PanOS9.1

batd2 — Tue, 02 Mar 2021 14:06:21 GMT

@reaper Thanks. Sorry I have missed that previously.

This gives the information we need. Just a shame that it does not log the username of the admin executing the command...

Re: opcmdhistory log missing in PanOS9.1

Comm2023 — Sat, 21 Jan 2023 18:40:40 GMT

Hello ,

Are there any commands on v10.2 to check command history on cli other than this one ? or can this be displayed in a more readable format?

Thanks