CLI COMMANDS TO EXPORT/IMPORT CONFIGURATION AND LOG FILES

Resolution

Details

The following four commands can be used to export and import various log and configuration files, and does not require special permissions, other than being an administrator. Note that the SCP option works only for Linux/Unix servers.

Note:  For PAN-OS 7.0, refer to the PAN-OS CLI Quick Start for the procedure to Use Secure Copy to Import and Export Files.

> scp export log

• data      data
• threat    threat
• traffic   traffic
• url       url

> scp export log-file

• control-plane      Use scp to export control-plane log-file
• data-plane0        Use scp to export data-plane0 log-file
• data-plane1        Use scp to export data-plane1 log-file
• data-plane2        Use scp to export data-plane2 log-file
• management-plane   Use scp to export management-plane log-file

> tftp export log-file

• control-plane      Use scp to export control-plane log-file
• data-plane0        Use scp to export data-plane0 log-file
• data-plane1        Use scp to export data-plane1 log-file
• data-plane2        Use scp to export data-plane2 log-file
• management-plane   Use scp to export management-plane log-file

The following four commands requires a Dynamic Role of Superuser or Superuser (read-only), or a Role Based Role with CLI elevation of superuser or super reader:

> scp export configuration

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• from          from
• to            Destination (username@host:path)

>  tftp export configuration

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• from          from
• to            Destination (username@host:path)

> scp import configuration

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• from          Source (username@host:path)

> tftp import configuration

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• from          Source (username@host:path)

The following scp import logdb and scp export logdb commands are applicable only for Palo Alto Networks firewalls (except the PA-7000 Series) and Panorama VM with versions up to 5.1.

> scp import logdb

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• from          Source (username@host:path)

> scp export logdb

• remote-port   SSH port number on remote host
• source-ip     Set source address to specified interface address
• to            Destination (username@host:path_to_destination_filename)