Palo Alto Networks Knowledgebase: Role-Based Admin not Showing Full IP or Username in Logs and Reports

Role-Based Admin not Showing Full IP or Username in Logs and Reports

2705
Created On 02/07/19 23:40 PM - Last Updated 02/07/19 23:41 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Symptom

When a role-based administrator account is used, logs and reports will display without usernames or IP addresses (1.2.3.4), instead networks will show (1.2.3.0/24), as shown in the example below:

trafficlogs-role.PNG

 

The screenshot below shows an example of the Admin Role Profile configuration, with only the Traffic and URL Filtering options selected:

role-details.PNG

 

Cause

The full IPs and names do not display because the Privacy Section options to “Show Full IP Addresses” and “Show User Names In Logs And Reports” was not enabled.

 

Resolution

To configure full IPs and names in the logs and reports, go to Device > Admin Roles, under Privacy there are two items:

  • Show Full IP Address
  • Show User Names In Logs And Reports

Click to enable both items and commit, as shown in the example below:

role-privacy.PNG

 

After the configuration is complete, the log or report will display the full IP address and usernames:

after-privacy.PNG

 

owner: jdelio



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClylCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language