Range of logs stored on PA-4050 appliance

Reply
Highlighted
L3 Networker

Range of logs stored on PA-4050 appliance

Hi All,

How do I find out the date range of the logs still be stored on an appliance?

If its FIFO Id like to know how far back the current logs on the box go back.

"show system logdb-quota" will tell me what space is being used and by what,

but not when it starts and ends.

Cheers,

    SteveR

L6 Presenter

Re: Range of logs stored on PA-4050 appliance

Hi...You can query each log database to see how far back the log is stored via the CLI.

vnguyen@ca1demo> show log traffic direction equal
  backward   backward
  forward    forward

For example, here's an output of the threat log showing the oldest threat entry is 2010/09/06 10:51:23.

vnguyen@ca1demo> show log threat
Time                App             From            Src Port   Source
Rule                Action          To              Dst Port   Destination
Severity            Src User        Dst User        Threat
===============================================================================
2010/09/06 10:51:23 web-browsing    untrust         80        82.98.235.78
Monitor ALL         alert           untrust         2793      10.154.2.217
high                                pancademo\janet Trojan-Virtumondo.Phonehome(19862)
2010/09/06 10:51:30 webdav          untrust         1291      98.210.4.148
Monitor ALL         alert           untrust         80        10.154.7.14

L3 Networker

Re: Range of logs stored on PA-4050 appliance

Thanks for that, just what I was after.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!