export logdb for report

[panos]

Hi,

If we export logdb and after sometime import again to another device

can we get the same report which we could access before exporting logdb ? (important Note : Using  Custom reports Traffic summary databese)

Thanks.

[kprakash]

Good Morning Panos,

You should get the same reports from the logdb that you imported from the other device. To export the logdb

>scp export logdb to

<value>   Destination (username@host:path_to_destination_filename)

To import the logdb

>scp import logdb from

<value>   Source (username@host:path)

Just to bear in mind that when exporting logs from a Panorama server to another Panorama, the Panorama servers must be on the same SW version to be able to import them. Doing an import will delete any existing logs and replace them with the imported logs.

Hope that helps,

BR,

Karthik

[panos]

Real case is just for a report using Traffic summary database.As you say there is no differences, we'll take the same report for that database.

[kprakash · Accepted solution]

Hi Panos,

Upon further digging, I found out that the traffic summary, the threat summary, the detailed logs are all different files under the same logdb directory. So if we are exporting the logdb we are essentially exporting the traffic summary DB as well. Once we import the logdb, we should be able to query the traffic summary database and create reports for it.

BR,

Karthik

[panos]

thanks for confirm.

regards