Panorama Disk and logs confusion

raji_toor — Wed, 12 Oct 2022 19:13:17 GMT

I don't know where the logs are going as they do not show up in Panorama GUI for more than 10 days.

------------------------------------

Panorama has 2TB disk on top of 81G, and that is considerable amount of storage.

Log storage only shows 13G available of which 10G is actually used. And this results in about 10 days of logs in GUI

-----------------------

show system disk-space

Filesystem Size Used Avail Use% Mounted on
/dev/root 7.9G 4.9G 2.6G 67% /
none 16G 100K 16G 1% /dev
/dev/sda5 24G 16G 7.3G 68% /opt/pancfg
/dev/sda6 5.9G 3.9G 1.7G 70% /opt/panrepo
tmpfs 16G 3.5G 13G 22% /dev/shm
cgroup_root 16G 0 16G 0% /cgroup
/dev/sda8 32G 12G 19G 37% /opt/panlogs
/dev/loop0 9.8G 23M 9.2G 1% /opt/logbuffer
/dev/sdb1 1.7T 1.4T 295G 83% /opt/panlogs/ld1
tmpfs 12M 28K 12M 1% /opt/pancfg/mgmt/ssl/private
tmpfs 32M 0 32M 0% /mnt/pantmp

--------------------------

show system logdb-quota

Quotas:
system: 20.00%, 2.681 GB Expiration-period: 0 days
config: 25.00%, 3.351 GB Expiration-period: 0 days
hip-reports: 1.00%, 0.134 GB Expiration-period: 0 days
appstat: 30.00%, 4.021 GB Expiration-period: 0 days

Disk usage:
system: Logs and Indexes: 2.7GB Current Retention: 50 days
config: Logs and Indexes: 1.7GB Current Retention: 736 days
appstatdb: Logs and Indexes: 4.0GB Current Retention: 178 days
hip-reports: Logs and Indexes: 0 Current Retention: 0 days

Slot:0
Quotas:
detailed: 60.00%, 282 GB Expiration-period: 0 days
summary: 30.00%, 141 GB Expiration-period: 0 days
infra_audit: 5.00%, 24 GB Expiration-period: 0 days
platform: 0.10%, 0 GB Expiration-period: 0 days
external: 0.10%, 0 GB Expiration-period: 0 days

Disk usage:
detailed: Logs: 273585 MB, Current Retention: 8 days
summary: Logs: 136741 MB, Current Retention: 20 days
infra_audit: Logs: 22806 MB, Current Retention: 133 days
platform: Logs: 0 MB, Current Retention: 0 days
external: Logs: 0 MB, Current Retention: 0 days

Space reserved for cores: 0MB

Re: Panorama Disk and logs confusion

Metgatz — Fri, 04 Nov 2022 21:15:48 GMT

Hello @raji_toor :

The section Logging and reporting its about local log space ( local PANORAMA PAN-OS and Log space ) the Collector Groups is the storage for the log of the firewalls.

Check this links:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMTXCA4

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-log-collection/configure-log-forwarding-to-panorama

Best Regards

topic Panorama Disk and logs confusion in Panorama Discussions

Panorama Disk and logs confusion

Re: Panorama Disk and logs confusion