Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to Export Logs - Knowledge Base - Palo Alto Networks

How to Export Logs

365828
Created On 09/25/18 20:36 PM - Last Modified 07/07/22 15:31 PM


Resolution


 

The process is similar for all types of logs. They can be located under the Monitor tab > Logs section.
User-added image

Steps

  1. Go to Monitor tab > Logs section > then select the type of log you are wanting to export.

    User-added image

  2. Once the type of log is selected, click Export to CSV icon, located on the right side of the search field.

    User-added image
    Note: Logs can also be exported using filters, which can be used to display only relevant log entries. For more information, please refer to: How to Add, Save, Load, and Clear Log Filters.  

  3. An Exporting Logs popup window is displayed.

    User-added image

  4. Click Download file.

    User-added image

    A CSV file is downloaded to the local Desktop.

    ss5.png

  5. (Optional) To check the exported log's content before uploading to the case, you can view by opening the CSV file in Excel, Google Sheets, or another spreadsheet application. ​​​​​​ss6.png
  6. ​Upload CSV file to the support case.

 

Export logs to a SCP or FTP server

Run the following commands to export log files:

  • SCP

    > scp export log traffic start-time equal 2011/12/21@12:00:00 end-time equal 2011/12/26@12:00:00 to <value> Destination (username:password@host) or (username@host)

  • FTP

    > ftp export log traffic start-time equal 2011/12/21@12:00:00 end-time equal 2011/12/26@12:00:00 to <value> Destination (username:password@host) or (username@host)

note: 'start-time' and 'end-time' are mandatory values when exporting from the CLI

 



Additional Information


Note: By default, the export logs feature exports only a max of 65535 lines. To increase the number of lines exported please refer to: How to Increase the Max. Rows in CSV Export

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clj3CAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language