Editing PAN-OS: Show log system

Jump to navigation Jump to search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
  <code>[[show log system]] receive_time in <last-60-seconds|last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-30-days|last-calendar-month></code>
+
  [[show log]] system receive_time in last-6-hrs
  
show log system direction equal [[backward]]
 
  
  show log system severity greater-than-or-equal [[low]]
+
== [[GlobalProtect]] logs ==
 +
  2017/05/06 15:11:22 info    globalp Global globalp 0 [[GlobalProtect]] gateway client switch to SSL tunnel mode succeeded. User name: NAME Private IP: 10.10.10.10
  
{{Show log system severity}}
+
2018/05/06 15:22:55 info    auth    Authen auth-su 0  '''authenticated''' for user '[email protected]'.  auth profile 'Authentication-Seq', vsys 'vsys1', server profile 'My_[[Radius]]_server', server address '10.10.10.43', auth protocol '[[PAP]]', From: 12.14.17.23.
  
 +
2017/05/06 18:18:47 info    globalp Global globalp 0  GlobalProtect gateway user '''logout'' succeeded. User name: USERNAME, Client OS version: Apple [[iOS]] 13.3.1, Reason: '''user session expired'''.
  
 +
2017/05/06 18:08:50 info    globalp Global globalp 0  '''GlobalProtect portal client configuration generated'''. Login from: 156.20.23.xxx, Source region: XX, User name: USERNAME, Client OS version: Apple [[Mac OS X 10.15.4]], Config name: you_GP_Portal_Agent, Client OS: Mac, Machine Certificate CN : , Host ID: xx:xx:e7:50:a1:xx, Serial No : XVFYT0LLM6XX
  
  show log system object equal
+
  2017/05/06 18:16:43 info    globalp Global globalp '''GlobalProtect portal client configuration failed'''. Login from: 156.20.23.xxx, Source region: XX, User name: USERNAME,, Client OS version: Apple [[Mac OS X 10.15.4]], Machine Certificate CN : (null), Host ID: xx:xx:e7:50:a1:xx, Serial No : XVFYT0LLM6XX
 
 
 
 
== Examples ==
 
[[show log system direction equal backward]] | [[match globalp]]
 
 
 
== Categories ==
 
* <code>[[general]]</code>
 
* <code>[[auth]]</code>
 
* <code>[[connect]]</code>
 
* <code>[[globalp]]</code>
 
 
 
== [[LDAP]] ==
 
2019/03/06 10:54:21 medium  userid  10.10. connect [[ldap]] cfg XX_XX_XXXXX failed to connect to server 10.10.XXX.XX:389: Error: Failed to connect to 10.10.XXX.XX(10.10.XXX.XX):389Error: Failed to connect to 10.10.XXX.xx(10.10.xxx.xx):389
 
 
2020/09/01 16:13:23 info    userid  10.10. connect 0  ldap cfg XXXXX connected to server 10.10.x.x:389, initiated by: 10.10.x.x
 
 
 
== [[GlobalProtect logs]] ==
 
* <code>[[match globalp]]</code>
 
 
 
 
 
== Medium ==
 
show log system severity greater-than-or-equal medium direction equal backward
 
2020/11/21 09:19:40 medium  [[auth]]    Authen auth-fa 0  failed authentication for user 'USERNAME'.  auth profile 'Authentication-Seq', vsys 'vsys1', From: 10.10.10.10.
 
  
 
== Related commands ==
 
== Related commands ==
 
* <code>[[match]]</code>
 
* <code>[[match]]</code>
* <code>[[set]]</code>
 
* <code>[[show log config]]</code>
 
  
 
== See also ==
 
== See also ==
* {{show PAN-OS}}
+
* {{show}}
 
* {{PAN-OS}}
 
* {{PAN-OS}}
  
  
 
[[Category:PAN-OS]]
 
[[Category:PAN-OS]]

Please note that all contributions to wikieduonline may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Wikieduonline:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)

Advertising: