Palo Alto Firewall - Exporting Log Database via FTP/SCP is not working

[Balakrish]

Hello All,

We are currently doing a POC with Palo Alto firewall in a customer network.

The POC got successfully completed. But while exporting the log database from the appliance we are hitting we issues.

After checking the admin guides, found the logs can be exported via FTP on the "Scheduled log export".

Via GUI:

Provided the FTP path, credentials and schedule time as needed, but the export is somehow failing to start through FTP.

The system logs show the export status as "Failed to export via FTP"

Via CLI:

Enabled the "debug cli on" to track the FTP export process after executing the FTP export command.

After FTP command execution, the appliance is successfully logging into the FTP server(as seen on the debug logs) but soon logs out without any data export. But the system logs in the GUI shows as the export to be success started and file is created on the destination FTP folder.

Even tried to transfer through SCP with WinSCP, but the appliance never logs into the appliance for initiating the export.

Kindly let me know a way to export all the log-database inside the appliance without any hitches. We have tried searching all the KB articles on the export, but unfortunately not able to find any inputs on this part.

Adding to the export issue, there is no provision to track the export/transfer status in either GUI/CLI which is making things much worse.

Thanks in advance!

Regards,

-Bala

[Ishfaq]

Hi Balakrish,

Is there an update on the same