Schedule Log Exports to an SCP or FTP Server
You can schedule exports of Traffic, Threat, URL Filtering, Data Filtering, HIP Match, and WildFire Submission logs to a Secure Copy (SCP) server or File Transfer Protocol (FTP) server. Perform this task for each log type you want to export.
You can use Secure Copy (SCP) commands from the CLI to export the entire log database to an SCP server and import it to another firewall. Because the log database is too large for an export or import to be practical on the following platforms, they do not support these options: PA-7000 Series firewalls (all PAN-OS releases), Panorama virtual appliance running Panorama 6.0 or later releases, and Panorama M-Series appliances (all Panorama releases).
- Select DeviceScheduled Log Export and click Add.
- Enter a Name for the scheduled log export and Enable it.
- Select the Log Type to export.
- Select the daily Scheduled Export Start Time. The options are in 15-minute increments for a 24-hour clock (00:00 - 23:59).
- Select the Protocol to export the logs: SCP (secure) or FTP.
- Enter the Hostname or IP address of the server.
- Enter the Port number. By default, FTP uses port 21 and SCP uses port 22.
- Enter the Path or directory in which to save the exported logs.
- Enter the Username and, if necessary, the Password (and Confirm Password) to access the server.
- (FTP only) Select Enable FTP Passive Mode if you want to use FTP passive mode, in which the firewall initiates a data connection with the FTP server. By default, the firewall uses FTP active mode, in which the FTP server initiates a data connection with the firewall. Choose the mode based on what your FTP server supports and on your network requirements.
- (SCP only) Click Test
SCP server connection. Before establishing a connection,
the firewall must accept the host key for the SCP server.If you use a Panorama template to configure the log export schedule, you must perform this step after committing the template configuration to the firewalls. After the template commit, log in to each firewall, open the log export schedule, and click Test SCP server connection.
- Click OK and Commit.
Device > Scheduled Log Export
Device > Scheduled Log Export You can schedule exports of logs and save them in CSV format to a File Transfer Protocol (FTP) server or ...
Schedule Export of Configuration Files
Schedule Export of Configuration Files Panorama saves a backup of its running configuration as well as the running configurations of all managed firewalls. The backups ...
Panorama > Scheduled Config Export
Panorama > Scheduled Config Export To schedule an export of all the running configurations on Panorama and firewalls, Add an export task and configure the ...
Export Logs You can export the contents of a log type to a comma-separated value (CSV) formatted report. By default, the report contains up to ...
Device > Setup > Operations
Device > Setup > Operations You can perform the following tasks to manage the running and candidate configurations of the firewall and Panorama. If you’re ...
Save and Export Panorama and Firewall Configurations
Save and Export Panorama and Firewall Configurations Saving a backup of the candidate configuration to persistent storage on Panorama enables you to later restore that ...
View and Manage Logs
View and Manage Logs A log is an automatically generated, time-stamped file that provides an audit trail for system events on the firewall or network ...
Use Secure Copy to Import and Export Files
Use Secure Copy to Import and Export Files Secure Copy (SCP) is a convenient way to import and export files onto or off of a ...
Export and Import a Complete Log Database (logdb)
Export and Import a Complete Log Database (logdb) Export a log database to an SCP-enabled server using the scp export command in operational mode. When ...