Add a Search Condition to a Remote Search

Previously, you could only add artifacts found with search results to a remote search. Now, you can add a condition from an existing search to a remote search as long as it is one of the following artifact types: SHA256 hash, IP address, user agent, filename, or URL.
The remote search feature is supported with firewalls running PAN-OS® 7.1 or later release versions.
  1. Start or continue an AutoFocus™ search.
  2. To look for matches to a search condition in a targeted firewall or system, select the ellipsis icon for the condition and
    Add to Remote Search
    .
    You can only add a condition to a remote search if it is one of the following artifact types: SHA256 hash, IP address, user agent, filename, or URL.
    remote-search-condition.png
  3. Open the current
    Remote Search
    to verify that the search condition was added.
    remote-search-condition-verify.png
  4. Next steps:

Related Documentation