syslog behavior when forwarding logs more than one syslog server (failover or replica ?)

RPendela — Wed, 29 Nov 2017 16:07:21 GMT

Hello Community Champs,

I configured two syslog server profiles and forwarding the logs to both servers, here my question is I am recieving traffic logs on both syslog servers but system logs are not recieving on second syslog server (thinking, for system logs it acting as failover?) even my system logs showing me connection established to second syslog server.

Also, is there any way I can configure syslog failover on PA-vm 100, 300, 820?

Re: syslog behavior when forwarding logs more than one syslog server (failover or replica ?)

MP18 — Sat, 11 Mar 2023 19:54:18 GMT

@RPendela

By default PA can send syslogs to upto 4 devices at same time.

You can do the PCAP on the Management plane to Tshoot further if your MGMT port is forwarding the syslogs.

Regards

Mahesh

topic syslog behavior when forwarding logs more than one syslog server (failover or replica ?) in Log Forwarding Discussions

syslog behavior when forwarding logs more than one syslog server (failover or replica ?)

Re: syslog behavior when forwarding logs more than one syslog server (failover or replica ?)