How To Check if a File Uploaded in a WildFire Hybrid Cloud Setup

How To Check if a File Uploaded in a WildFire Hybrid Cloud Setup

8690
Created On 05/01/19 06:11 AM - Last Modified 05/06/19 15:40 PM


Objective


How to check if a file has uploaded to public or private cloud in a WildFire hybrid cloud setup.
 

Procedure


This information can be obtained from wildfire-upload.log. This information is not present in the web interface). The PUB indicates that the sample has been uploaded to the Public Cloud and "PRIV" indicates that the sample has been forwarded to the Private Cloud (WF-500).
  
admin@PA-VM> tail lines 10 mp-log wildfire-upload.log
2017-05-09 00:01:49 +0800:  testpdf.pdf  pdf upload success   PUB 30699   10  562818  0x801c  allow
2017-05-09 01:46:44 +0800:     wildfire-test-pe-file.exe    pe    upload success    PRIV    26849    113    55296    0x801c
 

Additional Information


For additional information about the WildFire Hybrid Cloud, please review the following article: 
https://docs.paloaltonetworks.com/wildfire/8-1/wildfire-admin/wildfire-overview/wildfire-deployments/wildfire-hybrid-cloud.html
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLtKCAW&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language