opcmdhistory log missing in PanOS9.1

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
batd2
L3 Networker

opcmdhistory log missing in PanOS9.1

I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1. It was there in 9.0 and previous  versions.

 

Do you know why it changed and if the information is in another log file?

I was using it for troubleshooting and detecting cli commands executed by other admins, API calls, etc. 


Accepted Solutions
reaper
L7 Applicator

starting from PAN-OS 9.1.2 you can find the CLI history in req_stats.log

 

> less mp-log req_stats.log

 

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post


All Replies
reaper
L7 Applicator

starting from PAN-OS 9.1.2 you can find the CLI history in req_stats.log

 

> less mp-log req_stats.log

 

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

batd2
L3 Networker

Thanks for your quick response @reaper 

It is very useful to know about the new "req_stats.log" file. 

It looks like "req_stats.log" has the GUI and API commands, which is very helpful, but it does not seem to be showing a log of the CLI commands. 

reaper
L7 Applicator

it is, but in API format

 

here's  "show system info"

 

2021-03-01 16:31:14.880 | 2021-03-01 16:31:14.884 | 2021-03-01 16:31:15.195 | 2021-03-01 16:31:15.195 | 1 | 536.87 msecs | 1 | <request cmd="op" cookie="1" uid="1"><operations><show><system><info/></system></show></operations></request>

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
batd2
L3 Networker

@reaper Thanks. Sorry I have missed that previously. 

This gives the information we need. Just a shame that it does not log the username of the admin executing the command...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!