- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
06-02-2014 11:12 AM
Hi,
I would like to generate weekly a report with all the changes administrators made during the week.
I would like to export information I can see on the "Configuration Logs" with "Before change" and "After change".
If generate a csv file, I dont have the detail anymore, only date, admin name, and action type.
If I execture "show log config", I don't have details either.
How to get the complete configuration log by CLI or API or how to generate this type of report?
Thanks.
Best regard.
06-02-2014 12:41 PM
I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:
http://screencast.com/t/SANiPheT3yPT
If you're using a different version, it may have been a feature added to later code.
Hope this helps,
Greg
06-02-2014 12:41 PM
I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:
http://screencast.com/t/SANiPheT3yPT
If you're using a different version, it may have been a feature added to later code.
Hope this helps,
Greg
06-02-2014 12:45 PM
Whow thank you for your answer.
Im on PAN5 for my research but my customer will be in PAN6, so it's such a good news.
Could you check if you have this level of detail with this CLI command : show log config csv-output equal yes?
Thanks you so much.
Vincent.
06-02-2014 12:58 PM
Here's the detail I get for that same event using that command (edited to remove some internal details):
1,2014/05/12 08:05:42,...,CONFIG,0,0,...,...,,edit,admin,Web,Succeeded, deviceconfig setting management common-criteria-alarm-generation,3298,0x0
So it looks like the CLI command only includes the path rather than the before & after detail information as the actual export to CSV provides.
Best regards,
Greg
06-03-2014 01:55 AM
Thank you Gwesson.
Its really a shame that this command doesn't provide all the information you can have with the GUI.
I could have request that command with API to get the report I look for.
I have to find something else.
Thanks.
Best Regard.
Vincent.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!