Palo Alto CLI Output Control
paloalto cli command
set cli pager off
set cli pager on
Output Filtering
Match (grep equivalent)
show interface all | match ethernet1
show session all | match "10.1.1.1"
Except (inverse match)
show interface all | except loopback
Match Multiple Patterns
show session all | match "ACTIVE|INIT"
Output Redirection
Count Lines
show global-protect-gateway current-user | match "User Name" | count
First/Last N Lines
show session all | head 20
show session all | tail 20
Tips
- Pager setting persists only for current session
- Use
set cli scripting-mode on for script-friendly output
- Combine filters:
show log system | match error | tail 50