Palo Alto Networks Knowledgebase: How to Run a Report for Previous Logged in GlobalProtect Users

How to Run a Report for Previous Logged in GlobalProtect Users

14105
Created On 08/05/19 19:23 PM - Last Updated 08/05/19 19:48 PM
Resolution

Overview

This document describes how to create and export a report for previous logged in GlobalProtect users within the last one month.

 

Details

PAN-OS does not have a predefined or custom report capability under Monitor > Reports to create a report for previously logged in GlobalProtect users.

 

As shown below, previously logged in GlobalProtect users can be seen in real time under Network > GlobalProtect > Gateways > Previous Users:

 

Steps

In order to create an exportable report for previous users:

  1. Go to Monitor > Logs > System logs, filter the logs using:
    (eventid eq globalprotectportal-config-succ) and (receive_time in last-calendar-month):


  2. Click on the Excel icon on the top right-hand side of the page and download the file:

 

owner: kadak



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClplCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language