Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
01-11-2024 10:31 AM - last edited on 04-18-2024 11:33 AM by emgarcia
I am trying to do a search in CDL which will show me when a user disables their Global Protect agent on their end point. I am able to perform this search in Panorama using the search "(opaque contains 'Agent Disable')" under GlobalProtect logs. I am not able to replicate this in CDL
I can see the log in CDL looking in Firewall/GlobalProtect logs but I am unable to find a way to search for the string "Agent Disable" in the Description field.
Does anyone know how to search for a specific string in CDL?
Thanks!
01-11-2024 02:24 PM
Figured it out:
Description LIKE "%Agent Disable%"
Need a % at both the start and the end of the string you are searching for.
01-11-2024 02:24 PM
Figured it out:
Description LIKE "%Agent Disable%"
Need a % at both the start and the end of the string you are searching for.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
