How does an end-user collect logs from GlobalProtect agent when the advanced view is disabled

[DaxVC]

I want to collect log files from a GlobalProtect agent 4.1.2 but our gateway policy is set to disable the admin view.

By doing this, the user can't colelct any log files anymore.

Is there another way to collect logs ?

[Mick_Ball]

by default the logfiles are located in the install file.

c:\program files\palo alto networks\globalprotect

if you need the pangpa.log then this will be in %homepath%\appdata\local\globalprotect

[DaxVC]

Thank you for the response.

These file are usefull indeed, but PA support useally needs the zip file for investigation 🙂

I just wonder if it's possible to only enable the collect logs option in the GlobalProtect agent or if it's possible to genererate the log files using a command 

[Mick_Ball]

sorry can't answer that one but could you tell me where the setting is to restrict admin view on GP settings.

[DaxVC]

On the Palo Alto firewall go to Network/Global Protect/Portal

On the portal config, select the Agent section and open the configured agent 

In the configs select the APP section and there is an option to either enable or disable the advanced view

[Mick_Ball]

thanks for that, i feel a bit stupid as i was looking for the setting "Admin View".