Salesforce

How to Export Logs

« Go Back

Information

 
TitleHow to Export Logs
URL NameHow-to-Export-Logs-59928
SummarySteps on how to Export Logs from the PANW firewall.
Validation StatusValidated - External
Publication StatusPublished
Symptom
Environment
Cause
Resolution

 

The process is similar for all types of logs. They can be located under the Monitor tab > Logs section.
User-added image

Steps

  1. Go to Monitor tab > Logs section > then select the type of log you are wanting to export.

    User-added image

  2. Once the type of log is selected, click Export to CSV icon, located on the right side of the search field.

    User-added image
    Note: Logs can also be exported using filters, which can be used to display only relevant log entries. For more information, please refer to: How to Add, Save, Load, and Clear Log Filters.  

  3. An Exporting Logs popup window is displayed.

    User-added image

  4. Click Download file.

    User-added image

    A CSV file is downloaded to the local Desktop.

    ss5.png

  5. (Optional) To check the exported log's content before uploading to the case, you can view by opening the CSV file in Excel, Google Sheets, or another spreadsheet application. ​​​​​​ss6.png
  6. ​Upload CSV file to the support case.

 

Export logs to a SCP or FTP server

Run the following commands to export log files:

  • SCP

    > scp export log traffic start-time equal 2011/12/21@12:00:00 end-time equal 2011/12/26@12:00:00 to <value> Destination (username:password@host) or (username@host)

  • FTP

    > ftp export log traffic start-time equal 2011/12/21@12:00:00 end-time equal 2011/12/26@12:00:00 to <value> Destination (username:password@host) or (username@host)

note: 'start-time' and 'end-time' are mandatory values when exporting from the CLI

 

Additional Information
Note: By default, the export logs feature exports only a max of 65535 lines. To increase the number of lines exported please refer to: How to Increase the Max. Rows in CSV Export
Legacy ID59928
Legacy Urlhttp://live.paloaltonetworks.com:80/t5/Management-Articles/How-to-Export-Logs/ta-p/59928
Auto Assistant Signature

Powered by