How to Verify Log Deletion

Overview

When viewing traffic logs a user may notice that data is only accessible up to a certain date. However, earlier data should be accessible. This document explains how to verify log deletion.

Details

Palo Alto Networks firewalls contain the option to delete log data. Data can be deleted for a number of reasons, such as confidentiality or to preserve disk space.

To delete log data, in the WebGUI navigate to the Devices > Log Settings > Manage Logs

To verify whether or not logs have been deleted, and by whom, navigate to the system logs and filter by (description contains 'Log Type'). The output will display the deleted log information.

owner: jperry