Log to CSV export limits

[grenzi]

Hello everybody,

  sometimes I'm asked to export some logs from the devices I manage, and most of the time I'm given a well defined time range for the logs to search for. But sometimes I need all the logs matching a particular filter (source, destination, port/application) regardless of the time the logs were generated and, by default, the "export to CSV" is set to return at most 65,535 rows. I know that this limit can be raised up to 1,048,576. Has anyone set this value for the csv export? Is it safe to use this limit or It can have a huge impact on the management subsystem?

Thanks in advance.

[SNavsegda]

Hi

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaPCAS

[grenzi]

Hi @SNavsegda 

  thanks, I know how to increase that limit. My question was: exporting a 1 million rows CSV file from the UI could impact the device health and the management plane subsystem, i.e. making the WebUI unresponsive?

EDIT: ok, I got it! Thanks

Warning: Increasing the export to the maximum amount, 1048576, may cause management of the device to slow when exporting but will not affect the traffic traversing the firewall.

[SNavsegda]

I tried and in my case, answer was yes.