- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
05-24-2012 11:03 AM
I just installed the User-ID API PAN::API system on my Linux server to pass wireless syslog information to a Palo Alto User-ID Agent. The problem is the User-ID Agent does see the connection from Linux, but does not post the passed user logon data. The test Perl script is very small;
#!/usr/bin/perl
use strict;
use warnings;
use diagnostics;
use PAN::API;
my $uid = PAN::API::UID->new('10.1x.2xx.1xx');
$uid->add('logon','DOMAIN\somename', '10.7x.3x.1xx');
$uid->submit();
print "Done\n";
Now the User-ID Agent log shows the connection, but no passed data;
05/25/12 11:46:34 | Info | New xml api connection 10.1x.2xx.1xx : 57990: -2068154446
05/25/12 11:46:34 | Info | XML api thread 0 from 10.1x.2xx.1xx : 57990 is started.
05/25/12 11:46:34 | Debug | Event: type="XML API connection" name=" 10.1x.2xx.1xx" status="Connected"
05/25/12 11:46:34 | Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Connected (XML API)
05/25/12 11:46:34 | Info | XML api thread 0 accept finished
05/25/12 11:46:34 | Debug | XML api thread 0 SSL no certificate
05/25/12 11:46:34 | Debug | Event: type="XML API connection" name="10.1x.2xx.1xx" status="Disconnected"
05/25/12 11:46:34 | Debug | XML api thread 0 exists
05/25/12 11:46:34 | Info | XML api connection 10.1x.2xx.1xx : 57990 closed.
05/25/12 11:46:34 | Debug | All XML api connection stopped!
05/25/12 11:46:34 | Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Disconnected (XML API)
The Perl program throws no errors and everything ~looks~ fine.
I was wondering how one would go about troubleshooting thi issue.
Thanks in advance.
11-14-2012 05:28 AM
Hi,
there is a mistake in your script:
you write "logon" instead of "login"
you can use :
$class->login($username,$ipaddress);
or
$class->add($eventtype,$username,$ipaddress);
the event type can be login or logout, in this doc:
I think there is a mistake. try to use ->login() and ->logout() function instead.
regards
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!