>
    Strata Copilot
    PACli Commands for Collecting Endpoint Insights
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access Agent
    3. Prisma Access Agent Administration
    4. Manage Prisma Access Agents
    5. Endpoint Insights for Prisma Access Agent
    6. PACli Commands for Collecting Endpoint Insights
    Download PDF
    Prisma Access Agent

    PACli Commands for Collecting Endpoint Insights

    Table of Contents

    PACli Commands for Collecting Endpoint Insights

    Learn how to manage endpoint insights using specific Prisma Access Agent (PACli) commands.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • NGFW (Managed by Panorama)
    • Check the prerequisites for the deployment you're using
    • Minimum required Prisma Access Agent version: 25.7
    • macOS 14 and later or Windows 10 version 2024 and later desktop devices
    • Contact your Palo Alto Networks account representative to activate the Prisma Access Agent feature
    You can manage endpoint insights using specific Prisma Access Agent commands (PACli) on your endpoints. These commands enable you to control various aspects of the feature's functionality directly from the command-line interface. You can ask the user to enter the commands or enter the commands on their behalf in the remote shell.

    Core Endpoint Insights Commands

    • pacli eie status
      Enter this command to show the status of endpoint insights (whether diagnostics collection is enabled) and when the last periodic diagnostic data collection occurred.
    • pacli eie enable
      Enter this command to manually enable diagnostics collection, which is disabled by default. Administrators can also enable this feature by selecting Endpoint Insights in the Agent Settings in Strata Cloud Manager.
    • pacli eie disable
      Enter this command to manually disable diagnostics collection. Administrators can also disable this option by deselecting Endpoint Insights in the Agent Settings in Strata Cloud Manager.
    • pacli eie trigger -d "<description>"
      Enter this command to report an issue and manually trigger the collection of diagnostics from an endpoint, which will send an on-demand event to the Prisma Access Agent Manager. Users need to enter a description in 1000 characters or less. Once submitted, Prisma Access Agent will send the event within a few minutes. If diagnostics collection is disabled (for example Endpoint Insights is disabled), no diagnostic data will be collected.

    © 2025 Palo Alto Networks, Inc. All rights reserved.