06-17-2021 07:26 AM
I am wondering if there is any way we can check all the enabled debugging on Palo Alto firewall.
10-22-2021 08:31 PM
this is a a somewhat essential feature and lame that its not available. i understand what the OP wants. in cisco-land you can type "no debug all" to disable any trace of debug left by another user or to quickly kill all debugging. additionally, you can type "show debug" to see all levels of debug that are enabled. PAN firewall desperately needs this feature!
10-23-2021 04:20 AM
Oh, well if that is what they wanted, then they are simply needing this:
debug software logging-level show level service all-services
and to bring the levels back to default
debug software logging-level set level default service all-services
10-25-2021 09:11 AM
10-25-2021 03:06 PM
@anon4all It was as you suggested... turn on whatever you want and the 2nd command will bring them all back to whatever the default settings are, without knowing which debugs are turned on.
05-18-2022 10:26 AM
For reference you can run the command below on firewalls.
>debug software logging-level show level service all-services
This will allow yo to see "all-services" and the debug level currently turned on for them.
You can of course look at specific services by running
>debug software logging-level show level service .....AND now hit TAB to get presented the services you can then choose.
To set all to default level run the following
> debug software logging-level set level default service all-services
This does not work on Panorama.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!