Range of logs stored on PA-4050 appliance

[KatanaNZ]

Hi All,

How do I find out the date range of the logs still be stored on an appliance?

If its FIFO Id like to know how far back the current logs on the box go back.

"show system logdb-quota" will tell me what space is being used and by what,

but not when it starts and ends.

Cheers,

    SteveR

[rmonvon · Accepted solution]

Hi...You can query each log database to see how far back the log is stored via the CLI.

vnguyen@ca1demo> show log traffic direction equal
  backward   backward
  forward    forward

For example, here's an output of the threat log showing the oldest threat entry is 2010/09/06 10:51:23.

vnguyen@ca1demo> show log threat
Time                App             From            Src Port   Source
Rule                Action          To              Dst Port   Destination
Severity            Src User        Dst User        Threat
===============================================================================
2010/09/06 10:51:23 web-browsing    untrust         80        82.98.235.78
Monitor ALL         alert           untrust         2793      10.154.2.217
high                                pancademo\janet Trojan-Virtumondo.Phonehome(19862)
2010/09/06 10:51:30 webdav          untrust         1291      98.210.4.148
Monitor ALL         alert           untrust         80        10.154.7.14

[KatanaNZ]

Thanks for that, just what I was after.