Is the unified RPC interface (MonitorDirect.enqueueLogRequest) supported for external use?

[M.Huang358776]

Hi all,

I'm working on an integration that needs to query firewall logs across multiple log types (threat, url, wildfire, system, config, etc.) on a regular schedule.

We currently use the public XML API (/api/?type=log), which works well but requires a separate request per log type. While investigating alternatives, we noticed that the PAN-OS web UI uses an internal endpoint that appears to handle multi-type queries more efficiently:

/php/utils/router.php/MonitorDirect.enqueueLogRequest

Before considering this for a supported integration, I'd like to confirm a few things:

1. Is this endpoint supported for external/programmatic use, or is it strictly internal to the web UI?
2. If it's not officially supported, is there any guidance on equivalent functionality through the public API? (e.g., a way to query multiple log types in a single call)
3. Are there any plans to expose this or similar functionality through the documented XML/REST API in future PAN-OS releases?

Our concern is mainly around long-term stability — this integration will run across multiple PAN-OS versions for years, so we want to make sure we're building on a supported foundation.

Any guidance would be appreciated. Thanks!

[JayGolf]

Hi @M.Huang358776 ,

Good stuff on using the XML API!

That endpoint is used by the PAN-OS web UI and is not part of the documented/supported public API. I am also not aware of any future plans. . For now, I would continue using the XML API.