Configure GlobalProtect App Log File Count
Focus
Focus
GlobalProtect

Configure GlobalProtect App Log File Count

Table of Contents

Configure GlobalProtect App Log File Count

configure log file count
Where Can I Use This?What Do I Need?
  • NGFW (managed by Panorama)
  • Windows and macOS endpoints only
  • GlobalProtect version 6.2.8-h5 (6.2.8-c416) and later or 6.3.3-h4 (6.3.3-c828) and later
  • GlobalProtect Gateway license
To improve troubleshooting depth and analysis, GlobalProtect administrators can now control the number of rotating log files maintained on Windows and macOS endpoints. This increased log history helps you investigate complex issues more thoroughly. You can control the total number of log files on Windows and macOS devices using specific settings in the Windows Registry or the macOS plist. Note that these registry keys are not available on Windows UWP or if the GlobalProtect app is in the FIPS-CC mode.
KeyControls Log File Count ForValue RangeIndividual File Size
PanGPSLogFileCountPanGPS.exe process2-20
If a value is set outside this range, the client will treat it as the nearest boundary (2 or 20)
If this key does not exist,10 files are saved
5MB
LogFileCountPanGPA, PanGpHip, and PanGpHipMp processes2-20
If a value is set outside this range, the client will treat it as the nearest boundary (2 or 20)
If this key does not exist,2 files are saved
5MB
The log files are numbered sequentially For a setting of N files, the file names are as follows:
  • [ProcessName].log (the current log)
  • [ProcessName].1.log
  • [ProcessName].2.log
  • ... up to [ProcessName].[N-1].log
For example, if PanGPSLogFileCount is set to 5, the logs would be PanGPS.log, PanGPS.1.log, PanGPS.2.log, PanGPS.3.log, and PanGPS.4.log. The last file (PanGPS.4.log in our example) contains the latest logs.

Set the Registry Keys on Windows Endpoints

  1. Open the Registry Editor (regedit) as an administrator.
  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect.
  3. Right-click on the GlobalProtect key, select New, and then choose DWORD (32-bit) Value.
  4. Create the following keys and set their decimal value between 2 and 20:
    • PanGPSLogFileCount
    • LogFileCount
  5. Reboot your Windows device after setting the keys for the changes to take effect. These settings persist after you upgrade the GlobalProtect app.

Set the Registry Keys on macOS Endpoints

  1. Use a plist editor or a terminal command to modify the Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist file.
  2. Add the following keys as Integer values and set their value between 2 and 20:
    • PanGPSLogFileCount
    • LogFileCount
  3. Reboot your macOS device after setting the keys for the changes to take effect. These settings persist after you upgrade the GlobalProtect app.