Auto configuration email report

[AhmadFarouq]

Hi all

I would like to do automatic daily report from Panorama. this report should include all changes done by administrators is that possible and how ? 

[reaper]

hi @AhmadFarouq

Reports can only be created for traffic related logs, system logs can be exported to a SIEM or other solution that can build these reports

[BPry]

@AhmadFarouq,

I find it helpful to have a Log Settings 'Configuration' entry configured so that anything that matches the filter ( cmd eq commit ) generates an email to myself. This makes it so that I at least know when a commit was made and who actually did it. 

If you want to go a step further this is also something that you can work into a script; where once that alert is generated it triggers a script that pulls the running-config and compares it to the last running-config and sends you whats changed between the two. 

[Remo]

Hi @AhmadFarouq

In this blogpost you can find some help on how to automate such tasks with the config logs: https://live.paloaltonetworks.com/t5/Community-Blog/The-Power-of-XML-API/ba-p/202789