Problem exporting logs

[SOC_CSG]

Hi everybody

I'm trying to export a traffic monitor log but I always have the same problem. If I try to export a week or a single day I only get about 7-8 hours and a file of 16Mbs with no more than 50000 or 60000 rows. I have modified the "Logging and Reporting Settings" to increase the "Max Rows in CSV Export" to 1 million.

My device is a PA-2050 with PanOS 4.1.6.

Best regards

Gonzalo Arroyo

[sraghunandan]

There is a bug open in 4.1 branch wrt to this even though the max lines are set to 1048576 sometimes only 60-65k lines would show up  else browser would return  Page cannot be displayed

refer to the bug: 28222 fixed in 5.0.0

[sraghunandan]

For a workaround you can do the following:-

login to the cli:-

enable logging on putty.

> set cli pager off

> show log traffic start-time equal 2012/09/01@10:00:00 end-time equal  2012/09/03@10:00:00

this command would dump all the logs for that period.

[_slv_]

Hi

I'm also using log export. I stared from FTP export and now I have SCP export.

Logs are quite big - do you think that we should request option to export zip compressed logs?

Regards

Slawek

[mschuricht]

It seems like the best solution when there are lots of logs is to avoid using a scheduled export and instead focus on using syslog forwarding plus collection.

[SOC_CSG]

Thanks everybody for the answer. I manage to export the log with cli (thanks to sraghunandan :smileygrin:) maybe later i will upgrade to 5.0 and try again with GUI.

Best regards

[RohJaewoong]

Hello

PANOS 5.0 can export logs of 1048576 lines as well when I tested. About 300Mbytes logs were exporting on WEB-UI.

Thanks.

Regards,

Roh