How to check policy rule hit count from Management and Data plane
15402
Created On 10/17/22 21:45 PM - Last Modified 01/31/25 03:27 AM
Objective
This document provides the command on how to check policy rule hit count from the Management and Data plane
Environment
- PAN-OS
- Palo Alto Network Firewall
- Security Policy Rule
- Hit Count
Procedure
We will use the security policy rule base to view the policy rule hit count information from the Management Plane (MP) and Data Plane (DP) for this example
- The command below will display the Security Policy rule Hit Count information for all Security Rules from Management Plane
>show rule-hit-count vsys vsys-name vsys1 rule-base security rules all
- The command below will display the Security Policy rule Hit Count information for all Security Rules from Data Plane
>show running rule-use hit-count vsys vsys1 rule-base security rules all