PA Traffic Logs

TSgtAllebone — Thu, 16 Dec 2021 07:05:53 GMT

Top of the morning/evening,

Quick possibly dumb question regarding traffic/threat logs on the Palo Alto. I assume by default the traffic/threat logs are stored in /opt/panlogs directory. We currently forward logs to a syslog server which I assume is forwarding a copy of all traffic to as well. I was wondering what happens when this directory fills up? does it cut off the tail end and continue on?

Also, we used to have 5220's and only filled 5% capacity without threat license for a year. However, while using 3220's with the threat license and sitting at 34% after a few months. Do the threat license traffic generate much more? Both devices were configured log-wise the same.

Much appreciated!

topic Re: PA Traffic Logs in General Topics

PA Traffic Logs

Re: PA Traffic Logs