Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220. 

 

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

Untitled.png
mbowling by L1 Bithead
  • 39353 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

 

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

trice by L1 Bithead
  • 60321 Views
  • 45 replies
  • 22 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

 

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 26351 Views
  • 5 replies
  • 11 Likes

Ubuntu 20.04 expedition install / login failed

Hello,

 

I have a fresh Ubuntu 20.04 server 64bit and after install the latest Expedition I'm getting "Incorrect user or password."

Apache logs:

 

root@expedition:~# tail -f /var/log/apache2/error.log [Wed Feb 01 11:27:14.078549 2023] [:error] [pid 4...

GSkupien by L0 Member
  • 1340 Views
  • 1 replies
  • 0 Likes

Docker Container for Expedition

I created a Docker container for the Palo Alto Expedition tool as of version 1.1.38 and published it to Docker Hub. I rebuilt it on Alpine Linux and stripped the binaries, reducing the image size to a mere 1.43 GB. Optionally, you can make the databa

...

Resolved! Retrieving logs from Splunk

I was trying to see the capabilities of the log retrieval using splunk, and I can retrieve about 115 lines of data from splunk, the splunk job is finished, and there is data being transferred back and forth that can be seen with tcpump, but after a s

...

Expedition as a Syslog server

Hi all, I'm trying to set up Expedition as a Syslog server.  I am following the guides, but a folder under /PALogs is never created with the management IP of firewall sending the logs.  Any suggestions?  

Resolved! Incorrect User or Password from GUI

We have changed the admin password to something other than the default but now after a period of time we are getting "Incorrect User or Password" when trying to login via the GUI.  A few times before this we getting logged in then kicked out immediat

...

rds-r2d2 by L2 Linker
  • 29555 Views
  • 25 replies
  • 1 Likes

Issues with Import from Panorama

We have a complex environment with a physical ASA HA pair with multiple contexts, which we are slowing moving to Palo Alto VMs, one ASA context per VM HA pair. Some customers have existing PA VM pairs in addition to an ASA context. We have more than

...

Resolved! Scheduled Log Export - Permission Denied

So i have follwoed all the guides and posts i can find about changing the permissions and what not but i keep getting this error when i setup the scheduled log exports on one of my firewalls.

 

Error response from server: bash: /PALogs/ssh-export-tes

...

JohnMaki by L2 Linker
  • 8266 Views
  • 7 replies
  • 0 Likes

Vsys name and Zone name commit fail

I wanted to share this experience and maybe see if this is a bug or simply a condition of how PAN works.

 

I am migrating multiple ASA contexts into a multi-vsys PAN environment. I was doing a partial load config/xpath sequence from the CLI and I got

...

micharr_0-1679959182481.png
micharr by L1 Bithead
  • 1209 Views
  • 1 replies
  • 0 Likes

Resolved! Disabled Rules in Expedtiion

Expedition has some security policies greyed out as disabled. I corrected the issues that gave Expedition concern and now I would like those rules enabled before I complete the export/merge XML file step. I have sifted through all of the menus and ca

...

micharr by L1 Bithead
  • 1618 Views
  • 2 replies
  • 0 Likes
  • 1146 Posts
  • 83 Subscriptions
Top Solution Authors
Top Liked Authors
Labels