Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220. 

 

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

Untitled.png
mbowling by L1 Bithead
  • 35922 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

 

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

trice by L1 Bithead
  • 54738 Views
  • 45 replies
  • 22 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

 

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 24400 Views
  • 5 replies
  • 11 Likes

Expedition Unable to Import Logs from PA-1410

I have a customer that is deploying a brand new PA-1410. This site is a greenfield site so they want to build security policies as they bring devices online. They've recently provided me with an export of logs and I'm trying to get them imported into

...

Expedition logs out on page refresh

After upgrading Expedition to 1.2.57 we are seeing behavior where upon page refresh while in the Expedition tool we are booted back out to the login screen.  Full disclosure, patching Ubuntu seemed to have broken apache2 so we had to delete apache, t

...

dhoile by L0 Member
  • 900 Views
  • 2 replies
  • 1 Likes

Netscreen IPsec Migration

I imported Netscreen config file onto Expedtion but none of IPsec tunnel is imported. Netsreen is running at the latest version,  6.30r26. Does Expedition support this feature? Dustin

dushoang by L0 Member
  • 2362 Views
  • 4 replies
  • 0 Likes

Expedition Dashboard shows Update Available

Upon login, the Expedition Dashboard shows Update Available to 1.2.49. However, when I try to update in APT, it shows the latest package is installed. How do I get Expedition GUI to see this is on the latest version?

 

# sudo apt-get install expediti

...

spapesh by L1 Bithead
  • 1657 Views
  • 7 replies
  • 0 Likes

Best Practice Analysis Not Running

I see a couple discussions already posted about this, but they are from a few years ago and the solutions are not working for me. 

 

I've got Panorama imported as a device and I can see all device information from it (security policies, managed firew

...

Ubuntu 20.04 expedition install / login failed

Hello,

 

I have a fresh Ubuntu 20.04 server 64bit and after install the latest Expedition I'm getting "Incorrect user or password."

Apache logs:

 

root@expedition:~# tail -f /var/log/apache2/error.log [Wed Feb 01 11:27:14.078549 2023] [:error] [pid 4...

GSkupien by L0 Member
  • 1107 Views
  • 1 replies
  • 0 Likes

Docker Container for Expedition

I created a Docker container for the Palo Alto Expedition tool as of version 1.1.38 and published it to Docker Hub. I rebuilt it on Alpine Linux and stripped the binaries, reducing the image size to a mere 1.43 GB. Optionally, you can make the databa

...

Resolved! Retrieving logs from Splunk

I was trying to see the capabilities of the log retrieval using splunk, and I can retrieve about 115 lines of data from splunk, the splunk job is finished, and there is data being transferred back and forth that can be seen with tcpump, but after a s

...

Expedition as a Syslog server

Hi all, I'm trying to set up Expedition as a Syslog server.  I am following the guides, but a folder under /PALogs is never created with the management IP of firewall sending the logs.  Any suggestions?  

  • 1114 Posts
  • 76 Subscriptions
Top Solution Authors
Labels