PCNSA · Question #60
How do you reset the hit count on a Security policy rule?
The correct answer is A. select a security policy rule, right click Hit Count > Reset. To reset the hit count for a specific security policy rule, an administrator can right-click the rule within the web interface and select the "Reset" option from the hit count column.
Question
How do you reset the hit count on a Security policy rule?
Options
- Aselect a security policy rule, right click Hit Count > Reset
- Bwith a dataplane reboot
- CDevice > Setup > Logging and Reporting Settings > Reset Hit Count
- Din the CLI, type command reset hitcount <POLICY-NAME>
How the community answered
(51 responses)- A86% (44)
- B2% (1)
- C4% (2)
- D8% (4)
Why each option
To reset the hit count for a specific security policy rule, an administrator can right-click the rule within the web interface and select the "Reset" option from the hit count column.
In the Palo Alto Networks web interface, you can navigate to Policies > Security, right-click on the "Hit Count" column for a specific rule, and then select "Reset" from the context menu. This action directly resets the counter for that individual rule without affecting other rules or requiring a reboot.
A dataplane reboot is an extreme measure that would clear many counters but is not the appropriate or specific method for resetting a single policy rule's hit count.
There is no such direct path as "Device > Setup > Logging and Reporting Settings > Reset Hit Count" for resetting individual policy rule hit counts; this path relates to general logging settings, not specific rule counters.
While there might be CLI commands to show or clear statistics, the precise command `reset hitcount <POLICY-NAME>` is not the standard or documented method for resetting hit counts for security policy rules; the common CLI command for resetting rule counters is `clear counter global policy <policy_name>`.
Concept tested: Resetting security policy rule hit counts
Source: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/policy/monitor-policy-rule-usage
Topics
Community Discussion
No community discussion yet for this question.