Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

How to generate a configuration change report

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

How to generate a configuration change report

L1 Bithead

Hi,

I would like to generate weekly a report with all the changes administrators made during the week.

I would like to export information I can see on the "Configuration Logs" with "Before change" and "After change".

If generate a csv file, I dont have the detail anymore, only date, admin name, and action type.

If I execture "show log config", I don't have details either.

How to get the complete configuration log by CLI or API or how to generate this type of report?

Thanks.

Best regard.

1 accepted solution

Accepted Solutions

L7 Applicator

I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:

http://screencast.com/t/SANiPheT3yPT

If you're using a different version, it may have been a feature added to later code.

Hope this helps,

Greg

View solution in original post

4 REPLIES 4

L7 Applicator

I'm not sure what version of PAN-OS you're running, but at least on 6.0.2 the CSV export of the config logs does show the Before Change and After Change columns with their full detail:

http://screencast.com/t/SANiPheT3yPT

If you're using a different version, it may have been a feature added to later code.

Hope this helps,

Greg

Whow thank you for your answer.

Im on PAN5 for my research but my customer will be in PAN6, so it's such a good news.

Could you check if you have this level of detail with this CLI command : show log config csv-output equal yes?

Thanks you so much.

Vincent.

Here's the detail I get for that same event using that command (edited to remove some internal details):

1,2014/05/12 08:05:42,...,CONFIG,0,0,...,...,,edit,admin,Web,Succeeded, deviceconfig setting management common-criteria-alarm-generation,3298,0x0

So it looks like the CLI command only includes the path rather than the before & after detail information as the actual export to CSV provides.

Best regards,

Greg

Thank you Gwesson.

Its really a shame that this command doesn't provide all the information you can have with the GUI.

I could have request that command with API to get the report I look for.

I have to find something else.

Thanks.

Best Regard.

Vincent.

  • 1 accepted solution
  • 8588 Views
  • 4 replies
  • 3 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!