How to generate a configuration change report

Reply
Highlighted
L1 Bithead

How to generate a configuration change report

Hi,

I would like to generate weekly a report with all the changes administrators made during the week.

I would like to export information I can see on the "Configuration Logs" with "Before change" and "After change".

If generate a csv file, I dont have the detail anymore, only date, admin name, and action type.

If I execture "show log config", I don't have details either.

How to get the complete configuration log by CLI or API or how to generate this type of report?

Thanks.

Best regard.

L7 Applicator

Re: How to generate a configuration change report

I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:

http://screencast.com/t/SANiPheT3yPT

If you're using a different version, it may have been a feature added to later code.

Hope this helps,

Greg

L1 Bithead

Re: How to generate a configuration change report

Whow thank you for your answer.

Im on PAN5 for my research but my customer will be in PAN6, so it's such a good news.

Could you check if you have this level of detail with this CLI command : show log config csv-output equal yes?

Thanks you so much.

Vincent.

L7 Applicator

Re: Re: How to generate a configuration change report

Here's the detail I get for that same event using that command (edited to remove some internal details):

1,2014/05/12 08:05:42,...,CONFIG,0,0,...,...,,edit,admin,Web,Succeeded, deviceconfig setting management common-criteria-alarm-generation,3298,0x0

So it looks like the CLI command only includes the path rather than the before & after detail information as the actual export to CSV provides.

Best regards,

Greg

L1 Bithead

Re: How to generate a configuration change report

Thank you Gwesson.

Its really a shame that this command doesn't provide all the information you can have with the GUI.

I could have request that command with API to get the report I look for.

I have to find something else.

Thanks.

Best Regard.

Vincent.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!