- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
06-20-2018 02:13 PM - edited 06-20-2018 02:14 PM
Hello there,
I saw the video for ML - the features looks nice, however I am wonderinf is there are other alternatives other than send info via syslog or scp (as in video). I will like just to export it manually since I have my VM on my laptop and also directly from the device (in the future might have it directly connected).
Pleas let me know,
Thanks
06-22-2018 07:20 AM
They can store the logs locally and then you need only access to the SSH server to copy the csv files to your lan. then analyze, or Install Expedition in each customer and do all from each customer network----
06-22-2018 03:35 AM
Hi, you can export from the Firewall and import via SCP to your Expedition, or you can send from the firewall syslog to Expedition, you can schedule the log export to be executed every night by the firewall and automatilly upload the files to Expedition. You can do all but import from the Expedition GUI.
06-22-2018 06:26 AM
Thank you for the information.
1- So just to be clear, I can manually add logs from Palo Alto to Expedition right?
2- What will be the best aproach to analyze a remote Palo Alto? I can connect via client VPN, or just go there one day. I have clients with Palo Altos I a mwondering if this tool can help me to automate the process of rule creation (ML) and best practices.
Thanks,
06-22-2018 07:20 AM
They can store the logs locally and then you need only access to the SSH server to copy the csv files to your lan. then analyze, or Install Expedition in each customer and do all from each customer network----
06-25-2018 01:19 PM
Thanks for the information!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!