Greenfield ML Video - alternative other than use syslog

[Edwardo]

Hello there,

I saw the video for ML - the features looks nice, however I am wonderinf is there are other alternatives other than send info via syslog or scp (as in video). I will like just to export it manually since I have my VM on my laptop and also directly from the device (in the future might have it directly connected).

Pleas let me know,

Thanks

[alestevez]

Hi, you can export from the Firewall and import via SCP to your Expedition, or you can send from the firewall syslog to Expedition, you can schedule the log export to be executed every night by the firewall and automatilly upload the files to Expedition. You can do all but import from the Expedition GUI. 

[Edwardo]

Thank you for the information.

1- So just to be clear, I can manually add logs from Palo Alto to Expedition right?

2- What will be the best aproach to analyze a remote Palo Alto? I can connect via client VPN, or just go there one day. I have clients with Palo Altos I a mwondering if this tool can help me to automate the process of rule creation (ML) and  best practices.

Thanks,

[alestevez · Accepted solution]

They can store the logs locally and then you need only access to the SSH server to copy the csv files to your lan. then analyze, or Install Expedition in each customer and do all from each customer network----

[Edwardo]

Thanks for the information!