Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

opcmdhistory log missing in PanOS9.1

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

opcmdhistory log missing in PanOS9.1

L4 Transporter

I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1. It was there in 9.0 and previous  versions.

 

Do you know why it changed and if the information is in another log file?

I was using it for troubleshooting and detecting cli commands executed by other admins, API calls, etc. 

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

starting from PAN-OS 9.1.2 you can find the CLI history in req_stats.log

 

> less mp-log req_stats.log

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

5 REPLIES 5

Cyber Elite
Cyber Elite

starting from PAN-OS 9.1.2 you can find the CLI history in req_stats.log

 

> less mp-log req_stats.log

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Thanks for your quick response @reaper 

It is very useful to know about the new "req_stats.log" file. 

It looks like "req_stats.log" has the GUI and API commands, which is very helpful, but it does not seem to be showing a log of the CLI commands. 

it is, but in API format

 

here's  "show system info"

 

2021-03-01 16:31:14.880 | 2021-03-01 16:31:14.884 | 2021-03-01 16:31:15.195 | 2021-03-01 16:31:15.195 | 1 | 536.87 msecs | 1 | <request cmd="op" cookie="1" uid="1"><operations><show><system><info/></system></show></operations></request>

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaper Thanks. Sorry I have missed that previously. 

This gives the information we need. Just a shame that it does not log the username of the admin executing the command...

L0 Member

Hello ,

Are there any commands  on v10.2 to check command history on cli other than this one ? or can this be displayed in a more readable format?

Thanks

  • 1 accepted solution
  • 3912 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!