topic Re: Panorama logs per second in General Topics

Panorama logs per second

Sec101 — Thu, 10 Feb 2022 15:55:55 GMT

Does upgrading the CPU and memory for panorama increase the logs per second that a single virtual panorama in panorama mode can handle? Link below appears to show that as the case. I always thought that the limits were around 10k per second regardless. Upsizing specs must increase that?

https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/setup-prerequisites-for-the-panorama-virtual-appliance.html

Re: Panorama logs per second

LAYER_8 — Wed, 16 Feb 2022 18:23:15 GMT

Yes, that is correct. More memory allows for ingesting/indexing logs in larger quantities. If you will be exceeding 25K logs/second I would recommend using flex credits to deploy log collector groups of many redundant panoramas.

Re: Panorama logs per second

Sec101 — Wed, 16 Feb 2022 20:18:18 GMT

@LAYER_8 Are you safe in upgrading only the cpu and ram and not the storage?

Re: Panorama logs per second

LAYER_8 — Tue, 22 Feb 2022 17:32:42 GMT

VM PRA storage is good for up to 24Tb per iso. 48Tb if in HA.

So if you upgrade processing power that's fine, not upgrading storage is just your total log retention. As I'm sure you're aware, the more you scale intake without storage, the less time you retain logs for.