Rule usage report in PanOS 8?

[BoDollis]

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis? 

I see the rule usage data present, seems silly there wouldn't be a capability to query against it.

Rules (not) used withing last X days?

[ihealey]

PanOS 8, or 8.1?

If 8.1, then me responding is fruitless as I do not know the answer.

If 8.0, then I would recommend updating to 8.1. The coolest feature, to me, that was introduced with 8.1 is the ability to see how often rules are hit when looking at the policies on a given firewall.

[OtakarKlier]

Hello,

While I encourage all to read the release notes. Going to 9.0.4 offers additional features, including analyzing the policies over time to see if the policy could be modified with app instead of ports, etc.

But definitely move away from 8.0 since it is end of life.

https://docs.paloaltonetworks.com/resources/eol#sort=relevancy&layout=card&numberOfResults=25

Regards,

[BPry · Accepted solution]

@BoDollis,

This deviated from your original question quickly. 

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis? 

There is not a way to create a scheduled report for this within any current release of PAN-OS, regardless of version. This information is exposed in the API, so it is something that could be scripted.