Difference between revisions of "PAN-OS: Show log system"
Jump to navigation
Jump to search
| (16 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | [[show log system | + | <code>[[show log system]] receive_time in <last-60-seconds|last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-30-days|last-calendar-month></code> |
| − | show log system severity greater-than-or-equal [[ | + | |
| + | show log system direction equal [[backward]] | ||
| + | |||
| + | show log system severity greater-than-or-equal [[low]] | ||
{{Show log system severity}} | {{Show log system severity}} | ||
| + | |||
| + | |||
| + | |||
| + | show log system object equal | ||
== Examples == | == Examples == | ||
| − | show log system | [[match globalp]] | + | [[show log system direction equal backward]] | [[match globalp]] |
== Categories == | == Categories == | ||
| − | * general | + | * <code>[[general]]</code> |
| − | * auth | + | * <code>[[auth]]</code> |
| − | * [[connect]] | + | * <code>[[connect]]</code> |
| + | * <code>[[globalp]]</code> | ||
== [[LDAP]] == | == [[LDAP]] == | ||
2019/03/06 10:54:21 medium userid 10.10. connect 0 [[ldap]] cfg XX_XX_XXXXX failed to connect to server 10.10.XXX.XX:389: Error: Failed to connect to 10.10.XXX.XX(10.10.XXX.XX):389Error: Failed to connect to 10.10.XXX.xx(10.10.xxx.xx):389 | 2019/03/06 10:54:21 medium userid 10.10. connect 0 [[ldap]] cfg XX_XX_XXXXX failed to connect to server 10.10.XXX.XX:389: Error: Failed to connect to 10.10.XXX.XX(10.10.XXX.XX):389Error: Failed to connect to 10.10.XXX.xx(10.10.xxx.xx):389 | ||
| + | |||
| + | 2020/09/01 16:13:23 info userid 10.10. connect 0 ldap cfg XXXXX connected to server 10.10.x.x:389, initiated by: 10.10.x.x | ||
== [[GlobalProtect logs]] == | == [[GlobalProtect logs]] == | ||
| + | * <code>[[match globalp]]</code> | ||
| + | |||
| + | |||
| + | == Medium == | ||
| + | show log system severity greater-than-or-equal medium direction equal backward | ||
| + | 2020/11/21 09:19:40 medium [[auth]] Authen auth-fa 0 failed authentication for user 'USERNAME'. auth profile 'Authentication-Seq', vsys 'vsys1', From: 10.10.10.10. | ||
== Related commands == | == Related commands == | ||
* <code>[[match]]</code> | * <code>[[match]]</code> | ||
* <code>[[set]]</code> | * <code>[[set]]</code> | ||
| + | * <code>[[show log config]]</code> | ||
== See also == | == See also == | ||
| − | * {{show}} | + | * {{show PAN-OS}} |
* {{PAN-OS}} | * {{PAN-OS}} | ||
[[Category:PAN-OS]] | [[Category:PAN-OS]] | ||
Latest revision as of 09:53, 23 March 2023
show log system receive_time in <last-60-seconds|last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-30-days|last-calendar-month>
show log system direction equal backward
show log system severity greater-than-or-equal low
show log system severity equal <critical|high|medium|low|informational>show log system severity not-equal <critical|high|medium|low|informational>show log system severity greater-than-or-equal <critical|high|medium|low|informational>show log system severity less-than-or-equal <critical|high|medium|low|informational>
Examples:
show log system direction equal backward severity not-equal informationalshow log system direction equal backward severity greater-than-or-equal high
show log system object equal
Examples[edit]
show log system direction equal backward | match globalp
Categories[edit]
LDAP[edit]
2019/03/06 10:54:21 medium userid 10.10. connect 0 ldap cfg XX_XX_XXXXX failed to connect to server 10.10.XXX.XX:389: Error: Failed to connect to 10.10.XXX.XX(10.10.XXX.XX):389Error: Failed to connect to 10.10.XXX.xx(10.10.xxx.xx):389 2020/09/01 16:13:23 info userid 10.10. connect 0 ldap cfg XXXXX connected to server 10.10.x.x:389, initiated by: 10.10.x.x
GlobalProtect logs[edit]
Medium[edit]
show log system severity greater-than-or-equal medium direction equal backward 2020/11/21 09:19:40 medium auth Authen auth-fa 0 failed authentication for user 'USERNAME'. auth profile 'Authentication-Seq', vsys 'vsys1', From: 10.10.10.10.
Related commands[edit]
See also[edit]
Advertising:
