Palo Alto Networks Debugs Cheat Sheet

Debugs, what they are for and their default states. 

Debug Indicator(s)

Command(s)

Default State After Reboot (normal state)

debug level: debug

debug device-server show

info

debug:on level:debug

debug log-receiver show

debug:on level:info

cfg.global-protect.portal.debug = True

show system state | match portal.debug OR debug global-protect portal show

blank/no result/False

sw.ikedaemon.debug.global: debug

show system state | match debug.global OR debug ike global show

normal

sw.sslvpn.debug.global: debug

show system state | match debug.global OR debug ssl-vpn global show

info

sw.keymgr.debug.global: debug

show system state | match debug.global OR debug keymgr global show

normal

sw.rasmgr.debug.global: debug

show system state | match debug.global OR debug rasmgr show

normal

sw.satd.debug.global: debug

show system state | match debug.global OR debug rasmgr show

normal

sw.ikedaemon.debug.pcap: True

show system state | match debug.global OR debug ike pcap show

False

sw.sysd.debug-level: 4

show system state | match debug-level

4

sha.app.debug.level: debug

show system state | match debug.level

debug

md.apps.s0.mp.cfg.debug-level: debug

md.apps.s1.mp.cfg.debug-level: debug

md.apps.s1.dp1.cfg.debug-level: debug

md.apps.s1.dp0.cfg.debug-level: debug

md.apps.s1.mp.cfg.debug-level: debug

show system state | match debug-level OR debug master-service show

info

sw.cryptod.runtime.debug.level: debug

show system state | match debug.level OR debug cryptod global show

info

sw.dnsproxyd.runtime.debug.level: warn

show system state | match debug.level OR debug dnsproxyd global show

warn

sw.l2ctrld.lacp.runtime.debug.level: debug

show system state | match debug.level OR debug l2ctrld lacp show debug-level

info

sw.l2ctrld.lldp.runtime.debug.level: debug

show system state | match debug.level OR debug l2ctrld lacp show debug-level

warn

sw.l2ctrld.runtime.debug.level: debug

show system state | match debug.level OR debug l2ctrld global show

info

sw.pppoed.runtime.debug.level: debug

show system state | match debug.level OR debug pppoed global show

warn

sw.routed.runtime.debug.level: debug

show system state | match debug.level OR debug routing global show

info

sw.sslmgr.runtime.debug.level: debug

show system state | match debug.level OR debug sslmgr show setting

info

sw.dhcpd.runtime.debug.level: debug

show system state | match debug.level OR debug dhcpd global show

info

management-server debug:debug

debug management-server show

info

sw.mprelay.s1.cp.debug

debug mprelay show

info

sw.mprelay.s1.dp0.debug

debug mprelay show

info

sw.mprelay.s1.dp1.debug

debug mprelay show

info

sw.mprelay.s1.dp2.debug

debug mprelay show

info

sw.mprelay.s1.dp3.debug

debug mprelay show

info

sw.mprelay.s1.dp5.debug

debug mprelay show

info

sw.mprelay.s1.dp6.debug

debug mprelay show

info

sw.mprelay.s1.dp7.debug

debug mprelay show

info

sw.mprelay.s1.dp8.debug

debug mprelay show

info

sw.mprelay.s1.dp9.debug

debug mprelay show

info

debug.user-id.get

debug user-id get

info

debug: on level

debug var-data RX