This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Laimonas
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Laimonas
08-02-2022
19Posts
1Like
1Solution
Aug 02, 2022Last Visited
User
Activity
User
Profile
Latest posts by Laimonas
| Subject | Views | Posted |
|---|---|---|
| 20446 | 05-30-2019 10:36 PM | |
| 1087 | 05-30-2019 10:20 AM | |
| 20611 | 05-29-2019 12:18 AM | |
| 3550 | 05-28-2019 04:15 AM | |
| 3993 | 05-28-2019 04:12 AM | |
| 20685 | 05-28-2019 04:06 AM | |
| 20714 | 05-28-2019 12:38 AM | |
| 4054 | 05-22-2019 11:22 PM | |
| 4074 | 05-22-2019 11:30 AM | |
| 4099 | 05-21-2019 10:54 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 04-04-2019 10:15 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 2 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 05-30-2016 12:03 AM |
| Date Last Visited | 08-02-2022 06:04 AM |
| Posts | 19 |
| Total Likes Received | 1 |
05-30-2019
10:36 PM
I've succeeded by checking the box "AutoProcess CSV log files".
I think guide forgot to mention this.
... View more
05-30-2019
10:20 AM
Yes this works, but i need to delete all config-s first. Because GUI does not allow to choose subsystem when creating log for newly imported config.
Config file name must be in format without date.
... View more
05-29-2019
12:18 AM
after night, new file generated, but schedule did not work.
we see log message, but 1 file is still not processed.
... View more
05-28-2019
04:15 AM
see one more api.snapchat.io.
can You expedition team please comment if this is needed by expedition ?
... View more
05-28-2019
04:12 AM
any updates on this bug ?
... View more
05-28-2019
04:06 AM
there were 5 files
we've successfully updated to 1.1.21
now we'll have to wait till tomorrow to have new file.
we'll let You know
... View more
05-28-2019
12:38 AM
It does not work. I don't see CPU spikes i usually see when log processing in progress.
Doesn't it have to have cron record or something ?
The schedule was sset to 10:05:00
... View more
05-22-2019
11:22 PM
So yeah.
my guess is log plugin somehow bound to config and when new base is set, no log plugin is bound to it.
Deleting old config deletes log plugin connector.
Will this be addressed ?
... View more
05-22-2019
11:30 AM
Seems You've pointed me in the right direction.
Somehow log plugin was missing.
I see the same behaviour in other projects i created.
For now i found it has to do something with deleting old configs
... View more
05-21-2019
10:54 AM
no pending jobs, nothing to remove
... View more
05-20-2019
11:27 PM
It successfully generates any of them.
... View more
05-20-2019
04:00 AM
ML and RE discovery stuck at Initializing... when i set new base config
To reproduce
1) Update config at Device
2) Import into project
3) Set new base config
4) Start ML or RE discovery for any rule
Everything works well if you create new project(workaround)
... View more
05-17-2019
03:46 AM
I don't know why but you also need these:
please update.
It would be good idea to provide external URL list, so we could ad it into our rule set.
... View more
05-08-2019
11:37 AM
We all know expedition is able to make use of traffic logs.
But it's not clear which data from those logs are used ? I know it suggest app-id, but what about user-id(groups) ?
PA have many more types of logs:
auth, data, thread, traffic, tunnel, url, wildfire.
Because one of the expedition outputs - rules, i believe it could make use of url and auth logs.
But does it ?
I'd like to see expedition to suggest
users/groups to security policy rules
custon URL categories
decryption and authentication rules(could be tricky)
P.S. I ❤️ PA expedition
... View more
05-06-2019
10:35 PM
What servers or their URLs are required by expedition apt-get.
We've whitelisted *.paloaltonetworks.com.
We're asking because we se following:
Install these packages without verification? [y/N] y
Get:1 https://conversionupdates.paloaltonetworks.com expedition-updates/ expedition-beta 1.1.17 [40.7 MB]
Fetched 40.7 MB in 5s (7,139 kB/s)
(Reading database ... 114609 files and directories currently installed.)
Preparing to unpack .../expedition-beta_1.1.17_amd64.deb ...
Unpacking expedition-beta (1.1.17) over (1.1.16) ...
Setting up expedition-beta (1.1.17) ...
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))': /simple/pip/
mv: cannot move '/var/www/html/OS/startup/restore' to '/home/userSpace/utils/restore': Directory not empty
Checking for old projects and Devices what are not Encrypted
its recommended to run after install: apt-get -y -f install
its recommended to run after install: sudo apt-get autoremove
So where expedition send our data ? 🙂
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks