Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220. 

 

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

Untitled.png
mbowling by L1 Bithead
  • 44511 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

 

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

trice by L1 Bithead
  • 70221 Views
  • 46 replies
  • 23 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

 

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 29355 Views
  • 5 replies
  • 11 Likes

Export to Panorama or FW

Question - If I import a Panorama device config into a project, then a week later I want to push the new rules I have generated in the project to Panorama, it doesn't overwrite ALL of Panorama's configuration, right? It just pushes the difference sin

...

Won't process CSV files

I blew away my VM and reloaded it with an OVA our PA SE created for us.  It installed and functioned just like the one I had created and tried the first half of the week, but I wanted to start with a clean slate.  I'm using the specs from the Worksta

...

Esfeld by L2 Linker
  • 10621 Views
  • 10 replies
  • 1 Likes

Rule Enrichment on rules with Negate

So, I am doing a rule enrichment on a project. The rule I am enriching is very open, but utilizes negate objects in source/dest. I just noticed that the rules I generated in Expedition via rule enrichment contained the two group-objects I am negating

...

Expedition not Migrating SRX destination NAT

I am trying to conevert SRX NAT rules to Palo Alto. Destination nats are not converted properly. On Nat rule its using destination nat ip as same public and on Security policy its using internal IP as destination IP.  Has any one come accross similar

...

Thanseer by L0 Member
  • 3388 Views
  • 1 replies
  • 0 Likes

Automatic log processing

Is there a way of telling Expedition to process all avaliable logs from the cli or on a schedule?

 

I already have scripts that can pull logs over to my expedition machine on a nightly basis.  It would be great if Expedition could automatically impor

...

cchaffee by L1 Bithead
  • 3924 Views
  • 1 replies
  • 1 Likes

Resolved! Invalid Zones after importing ASA configuration

Hi,

 

I have loaded an ASA configuration to Expedition and the dashboard shows 2 invalid zones, however I can't get any clue as what it is invalid on those 2 zones.

 

There are 10 zones in total and I can't tell what's different on these 2. Looking a

...

Screen Shot 2018-07-25 at 3.27.48 pm.png
Screen Shot 2018-07-25 at 3.28.14 pm.png

Resolved! New Error Message I've Not Seen Before

Caught this in the temporary file for log processing...

 

 

# There is insufficient memory for the Java Runtime Environment to continue.
# Native memory allocation (mmap) failed to map 113700864 bytes for committing reserved memory.
# An error report f

...

logprocstuck.PNG

Problems with importing logs

I've added a panorama device into Expedition and i'm trying to import logs that I've exported from panorama and am running into an issue.  I put the csv file in /home/expedition/logs.  The csv is called panorama.csv.  /home/expedition/logs/* (logs pa

...

staustin by L2 Linker
  • 13679 Views
  • 17 replies
  • 0 Likes

Import Expediton image into VMware Workstation 10

I am trying to import the vmx image into VMware but the import fails as it cannot find a Linux OS.

 

The import is using VMware Workstation 10 for Windows.

 

What is the best practice procedure to import this image into VMware given there is no ova o

...

rschunk by L2 Linker
  • 5486 Views
  • 2 replies
  • 0 Likes
  • 1183 Posts
  • 90 Subscriptions
Top Liked Posts
Top Liked Authors
Labels