CLI Cheat Sheet: Panorama
Use the following commands on Panorama to perform common configuration and monitoring tasks for the Panorama management server (M-Series appliance in Panorama mode), Dedicated Log Collectors (M-Series appliances in Log Collector mode), and managed firewalls.
To view system information about a Panorama virtual appliance or M-Series appliance (for example, job history, system resources, system health, or logged-in administrators), see CLI Cheat Sheet: Device Management.
A Dedicated Log Collector mode has no web interface for administrative access, only a command line interface (CLI).
If you want to . . .
Use . . .
M-Series Appliance Mode of Operation (Panorama, Log Collector, or PAN-DB Private Cloud Mode)
Switching the mode reboots the M-Series appliance, deletes any existing log data, and deletes all configurations except the management access settings.
> show system info | match system-mode
> request system system-mode logger
> request system system-mode panurldb
> request system system-mode panorama
> request system system-mode panorama
> request system system-mode legacy
Panorama Management Server
> set cli config-output-mode set
The following is an example of the output for the show device-group command after setting the output format:
# show device-group branch-offices set device-group branch-offices devices set device-group branch-offices pre-rulebase ...
> set panorama [off | on]
> request high-availability sync-to-remote [running-config | candidate-config]
> request batch reboot [devices | log-collectors] <serial-number>
> set dlsrvr poll-interval <5-60>
Device Groups and Templates
> show devicegroups name <device-group-name>
> show templates name <template-name>
> show config pushed-shared-policy
> show config pushed-template
> debug log-collector log-collection-stats show incoming-logs
> debug log-collector log-collection-stats show log-forwarding-stats
> show logging-status device <firewall-serial-number>
> clear log [acc | alarm | config | hipmatch | system | threat | traffic]
Deploy Panorama with Dedicated Log Collectors
Deploy Panorama with Dedicated Log Collectors The following figures illustrate Panorama in a distributed log collection deployment. In these examples, the Panorama management server comprises ...
Set Up the M-Series Appliance as a Log Collector
Set Up the M-Series Appliance as a Log Collector If you want a dedicated appliance for log collection, configure an M-100 or M-500 appliance in ...
Logging Enhancements on the Panorama Virtual Appliance
Logging Enhancements on the Panorama Virtual Appliance You can now create a Log Collector that runs locally on the Panorama virtual appliance. Because the local ...
Migrate Logs to a New M-Series Appliance in Log Collector M...
Migrate Logs to a New M-Series Appliance in Log Collector Mode If you need to replace an M-500 or M-100 appliance in Log Collector mode ...
Migrate Logs to a New M-Series Appliance Model in Panorama Mode in High Availability
Procedure to migrate logs from a decommissioned M-Series appliance in a HA pair to a new M-Series appliance of a different model. ...
Migrate Logs to a New M-Series Appliance in Panorama Mode
Procedure to migrate logs from a decommissioned M-Series appliance, that is not in a HA pair, to a new M-Series appliance. ...
Migrate Log Collectors after Failure/RMA of Non-HA Panorama
Migrate Log Collectors after Failure/RMA of Non-HA Panorama If a system failure occurs on a Panorama management server that is not deployed in a high ...
Set Up the Panorama Virtual Appliance with Local Log Collector
Set Up the Panorama Virtual Appliance with Local Log Collector After you upgrade from a Panorama 7.1 or earlier release to a Panorama 8.0 (or ...
Migrate Logs to the Same M-Series Appliance Model in Panorama Mode in High Availability
Procedure to migrate logs from a decommissioned M-Series appliance in a HA pair to a new M-Series appliance of the same model. ...