Creating a Log forwarding profile via GUI, configuration will not be displayed by show command.

Creating a Log forwarding profile via GUI, configuration will not be displayed by show command.

21140
Created On 09/26/18 13:47 PM - Last Modified 06/09/23 06:30 AM


Resolution


Prerequisites
The content described in this article was verified with PAN-OS 8.0.12, PAN-OS 8.1.0, and PAN-OS 8.1.3 which is the latest at the time of posting.

 

 

Issue
In PAN-8.1.0 or later, if you create a Log forwarding profile via GUI, the configuration will not be displayed by the "show" command after login with ssh.

 

This is the result of the fix for the issue, which is the expected behavior.

 

log_forwarding_profile.png
2018-09-13_15h14_27.png


This behavior is PAN-OS 8.1.0 or later.
In earlier PAN-OS versions, the configuration IS displayed by "show" command.

 


Cause


The reason for this behavior is that since the Log forwarding profile is set as the configuration of vsys 1 when using the GUI on a device that is operating with only one vsys, since the configuration does not exist within the range that can be viewed with the CLI command.


Therefore, it does not occur on devices with multi vsys enabled.
This issue does not mean that config can not be input by GUI operation.


By comparing and checking config, you can see that the setting contents are reflected.

 2018-09-13_15h21_49_orange.png

 


WorkAround
You can avoid this behavior by submitting the config via ssh.
The image below shows the result of submitting the following commands via ssh.

 

# set shared log-settings profiles test match-list test send-to-panorama yes
# set shared log-settings profiles test match-list test log-type traffic
# set shared log-settings profiles test match-list test filter "All Logs"2018-09-13_15h42_28_orange.png

 

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CloVCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language