How can I run a report to extract users logged in via Global protect last month?

Reply
L1 Bithead

How can I run a report to extract users logged in via Global protect last month?

How can I run a report in PaloAlto Firewall to extract users logged in via Global protect last month?

PA-500 5.0.2

Tags (2)
L5 Sessionator

Re: How can I run a report to extract users logged in via Global protect last month?

If you simply need a list of GP Users that logged in, Run following Query in Monitor>System Logs:

( eventid eq globalprotectportal-config-succ ) and (receive_time in last-calendar-month)

L1 Bithead

Re: How can I run a report to extract users logged in via Global protect last month?

Exactly what I was looking for. Spot on. Thank you.

L0 Member

Re: How can I run a report to extract users logged in via Global protect last month?

Is there a way I can do that and also see the duration of each login session?  Also can I specify last 7 days, 3 days, etc?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!