<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Switch from Panorama Mode to Log Collector Mode Removes Logs? in Panorama Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/panorama-discussions/switch-from-panorama-mode-to-log-collector-mode-removes-logs/m-p/1246707#M3017</link>
    <description>&lt;P&gt;Hello there,&lt;/P&gt;
&lt;P&gt;it's been some time. Have you still tried the command or something else? What was the outcome?&lt;/P&gt;
&lt;P&gt;BR&lt;/P&gt;</description>
    <pubDate>Tue, 27 Jan 2026 09:40:33 GMT</pubDate>
    <dc:creator>J.Dhling</dc:creator>
    <dc:date>2026-01-27T09:40:33Z</dc:date>
    <item>
      <title>Switch from Panorama Mode to Log Collector Mode Removes Logs?</title>
      <link>https://live.paloaltonetworks.com/t5/panorama-discussions/switch-from-panorama-mode-to-log-collector-mode-removes-logs/m-p/479311#M845</link>
      <description>&lt;P&gt;I started with a Panorama (pan mode) VM 9.1.12-h3 and we only had a 200GB virtual logging disk (this was a throwback to when the system was originally built on PAN 4.6).&amp;nbsp; We needed to add more logging space and wanted to add a 2TB virtual logging disk.&amp;nbsp; A system limitation prevents you from adding an additional disk if the existing disk is less than 2TB.&lt;/P&gt;
&lt;P&gt;I decided to rebuild Panorama on a new VM with a new logging disk of 2TB.&amp;nbsp; I created the new system from the 9.1.12 OVA, exported the configuration from the old Panorama and imported onto the new.&amp;nbsp; Everything in that respect is working well and we are now logging to the 2TB disk on the new Panorama.&lt;/P&gt;
&lt;P&gt;Now my issue is that I want to be able to access the logs that remain on the old Panorama, through the Monitoring tab on the new Panorama.&amp;nbsp; The indication to me that this was possible is described here:&lt;BR /&gt;&lt;A href="https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor" target="_blank"&gt;Migrate a Panorama Virtual Appliance to a Different Hypervisor (paloaltonetworks.com)&lt;/A&gt;&lt;BR /&gt;&lt;STRONG&gt;In step 10, part 1: To maintain access to logs stored on the old Panorama virtual appliance, change to Log Collector mode and add the Dedicated Log Collector to the new Panorama virtual appliance.&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;However, when I log onto the CLI of the old Panorama and enter the command:&lt;/P&gt;
&lt;P&gt;&lt;LI-WRAPPER&gt;&lt;/LI-WRAPPER&gt;&lt;/P&gt;
&lt;PRE class="pre screen" style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 12px; display: block; padding: 20px; margin: 0px 0px 10px; line-height: 1.42857; word-break: break-all; overflow-wrap: break-word; color: #36424b; background: #f8f8f8; border: none; border-radius: 25px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-outputclass="output"&gt;&amp;gt; request system mode logger&lt;/PRE&gt;
&lt;DIV style="box-sizing: border-box; display: inline;"&gt;The message returned is:&lt;BR /&gt;
&lt;P&gt;&lt;LI-WRAPPER&gt;&lt;/LI-WRAPPER&gt;&lt;/P&gt;
&lt;PRE class="pre screen" style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 12px; display: block; padding: 20px; margin: 0px 0px 10px; line-height: 1.42857; word-break: break-all; overflow-wrap: break-word; color: #36424b; background: #f8f8f8; border: none; border-radius: 25px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-outputclass="output"&gt;&lt;SPAN&gt;Executing this command will change the system to logger mode, logs will be removed. This will restart the system. Are you sure you want to continue? (y or n)&lt;/SPAN&gt;&lt;/PRE&gt;
So this seems to be a contradiction to me because I am trying to maintain access to the logs on the old Panorama, as per the document, but this message would seem to indicate that all those logs will be removed?&lt;/DIV&gt;
&lt;DIV style="box-sizing: border-box; display: inline;"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV style="box-sizing: border-box; display: inline;"&gt;Does anyone have experience with is?&amp;nbsp; Is it possible that only system logs will be removed from PAN VM System Disk, or is this really going to wipe all the logs from the virtual logging disk on the old Panorama, which means there is no point in doing this?&lt;/DIV&gt;
&lt;DIV style="box-sizing: border-box; display: inline;"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV style="box-sizing: border-box; display: inline;"&gt;Thanks in advance for any advice.&lt;/DIV&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 08 Apr 2022 13:39:27 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/panorama-discussions/switch-from-panorama-mode-to-log-collector-mode-removes-logs/m-p/479311#M845</guid>
      <dc:creator>Stiver</dc:creator>
      <dc:date>2022-04-08T13:39:27Z</dc:date>
    </item>
    <item>
      <title>Re: Switch from Panorama Mode to Log Collector Mode Removes Logs?</title>
      <link>https://live.paloaltonetworks.com/t5/panorama-discussions/switch-from-panorama-mode-to-log-collector-mode-removes-logs/m-p/1246707#M3017</link>
      <description>&lt;P&gt;Hello there,&lt;/P&gt;
&lt;P&gt;it's been some time. Have you still tried the command or something else? What was the outcome?&lt;/P&gt;
&lt;P&gt;BR&lt;/P&gt;</description>
      <pubDate>Tue, 27 Jan 2026 09:40:33 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/panorama-discussions/switch-from-panorama-mode-to-log-collector-mode-removes-logs/m-p/1246707#M3017</guid>
      <dc:creator>J.Dhling</dc:creator>
      <dc:date>2026-01-27T09:40:33Z</dc:date>
    </item>
  </channel>
</rss>

