12-31-2016 04:30 PM
I have a need to search my Panorama traffic logs looking for 1000's of source IPs, engress on the outside zone. I would like to write a bash script to actually read through the logs for the IP's. Manually searchinf for this large amount of IPs is not practical. Has any one done this? Any ideas how to start? I can SSH into the Panorama but no idea where the files are or the names. Also suspect I will not be able to run any type of scripting on the Panorama box but will have to exprt the logs files to another box. Any help would be appreicated.
01-03-2017 01:28 AM
Hi,
Scriptinh in the Panoram should be not the good approach.
Maybe have a look on https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld it can help your.
Seem to be very powerfull.
Rgds
V.
01-03-2017 12:55 PM - edited 01-03-2017 12:57 PM
You could create an script use the XML api the get the logs,
If you have further questions you can use our dev forum,
https://live.paloaltonetworks.com/t5/APIs/bd-p/TechnologiesSDKsDiscussions
regards,
Gerardo.
01-03-2017 01:28 AM
Hi,
Scriptinh in the Panoram should be not the good approach.
Maybe have a look on https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld it can help your.
Seem to be very powerfull.
Rgds
V.
01-03-2017 12:55 PM - edited 01-03-2017 12:57 PM
You could create an script use the XML api the get the logs,
If you have further questions you can use our dev forum,
https://live.paloaltonetworks.com/t5/APIs/bd-p/TechnologiesSDKsDiscussions
regards,
Gerardo.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
