topic Re: unable to see logs on panorama in Panorama Discussions

unable to see logs on panorama

AmeyaAcharya — Mon, 22 Jan 2024 09:18:18 GMT

Hello Guys,

I've recently deployed a Panorama VM on azure. I have imported a firewall's config on the panorama. When I check in the managed devices summary section, the firewall looks connected and is ""In Sync" on the panorama. However, I can't see logs in the monitor section on the panorama.

The Panorama is working in Panorama mode with local log collection capabilities. I've configured the log collector, collector group. In the collector group config, I've mapped the firewall with the log collector as well.

I've configured a log forwarding profile and attached to a firewall rule. Pushed the changes to the Device group and Log Collector group too. however, I still can't see logs on the panorama in monitor section.

Can anyone assist me please?

Re: unable to see logs on panorama

JayGolf — Wed, 24 Jan 2024 05:32:35 GMT

Hi @AmeyaAcharya ,

Can you paste the output you receive from the command debug management-server log-collector-agent-status ?

Re: unable to see logs on panorama

PavelK — Wed, 24 Jan 2024 06:04:37 GMT

Hello @AmeyaAcharya

apart from what Jay mentioned could you also confirm that both Firewall as well as Panorama have the same time/time zone: Device logs are not showing up in the Panorama GUI due to mismatch of the time.

Kind Regards

Pavel

Re: unable to see logs on panorama

AmeyaAcharya — Wed, 24 Jan 2024 14:09:09 GMT

Hello,

The issue is fixed. problem was that Panorama was advertising its own private ip (mgmt ip) to the firewall. While the firewall-panorama connection was via public IP of panorama. I added the public ip of panorama on the panorama's mgmt interface settings. then the firewall learnt about the public ip of the LC and the log forwarding started.