Searching Script For Panorama Traffic Logs

Reply
Highlighted
L1 Bithead

Searching Script For Panorama Traffic Logs

I have a need to search my Panorama traffic logs looking for 1000's of source IPs, engress on the outside zone. I would like to write a bash script to actually read through the logs for the IP's. Manually searchinf for this large amount of IPs is not practical. Has any one done this? Any ideas how to start? I can SSH into the Panorama but no idea where the files are or the names. Also suspect I will not be able to run any type of scripting on the Panorama box but will have to exprt the logs files to another box. Any help would be appreicated. 

Tags (2)

Accepted Solutions
Highlighted
L5 Sessionator

Hi,

 

Scriptinh in the Panoram should be not the good approach.

Maybe have a look on https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld it can help your.

 

Seem to be very powerfull.

 

Rgds

 

V.

View solution in original post

Highlighted
L4 Transporter

You could create an script use the XML api the get the logs, 

https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api/pan-os-xml-api-request-types/retrie...

If you have further questions you can use our dev forum,

https://live.paloaltonetworks.com/t5/APIs/bd-p/TechnologiesSDKsDiscussions

 

regards,

Gerardo.

View solution in original post

Tags (1)

All Replies
Highlighted
L5 Sessionator

Hi,

 

Scriptinh in the Panoram should be not the good approach.

Maybe have a look on https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld it can help your.

 

Seem to be very powerfull.

 

Rgds

 

V.

View solution in original post

Highlighted
L4 Transporter

You could create an script use the XML api the get the logs, 

https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api/pan-os-xml-api-request-types/retrie...

If you have further questions you can use our dev forum,

https://live.paloaltonetworks.com/t5/APIs/bd-p/TechnologiesSDKsDiscussions

 

regards,

Gerardo.

View solution in original post

Tags (1)
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!