<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Log recovery after Panorama downtime in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/log-recovery-after-panorama-downtime/m-p/48631#M35812</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;If the Virtual Panorama goes down for a several hours for maintenance and then comes back online will the Panorama reliably request and receive the updates from the individual firewalls logs for the time it was down so that the logs will be complete? What caveat's may be expected.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Customer has a Virtual Panorama that collects logs from several firewalls. The log volume is needing to be expanded. The customer would like to take down the Panorama and attach a larger volume and copy the Logdb over to the new volume and then bring it back online and continue receiving the logs without a loss of log data.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Customer is already aware that copying over the logdb is not supported. The question is after doing this will the logs be collected on the Panorama during the downtime.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 03 Feb 2014 18:44:13 GMT</pubDate>
    <dc:creator>cstephenson</dc:creator>
    <dc:date>2014-02-03T18:44:13Z</dc:date>
    <item>
      <title>Log recovery after Panorama downtime</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/log-recovery-after-panorama-downtime/m-p/48631#M35812</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;If the Virtual Panorama goes down for a several hours for maintenance and then comes back online will the Panorama reliably request and receive the updates from the individual firewalls logs for the time it was down so that the logs will be complete? What caveat's may be expected.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Customer has a Virtual Panorama that collects logs from several firewalls. The log volume is needing to be expanded. The customer would like to take down the Panorama and attach a larger volume and copy the Logdb over to the new volume and then bring it back online and continue receiving the logs without a loss of log data.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Customer is already aware that copying over the logdb is not supported. The question is after doing this will the logs be collected on the Panorama during the downtime.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 03 Feb 2014 18:44:13 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/log-recovery-after-panorama-downtime/m-p/48631#M35812</guid>
      <dc:creator>cstephenson</dc:creator>
      <dc:date>2014-02-03T18:44:13Z</dc:date>
    </item>
    <item>
      <title>Re: Log recovery after Panorama downtime</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/log-recovery-after-panorama-downtime/m-p/48632#M35813</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;You will not loose your logs if downtime is not very long.When Panorama is not accessible, from that time paloalto will mark the timestamp...when panorama will become available...Then all logs will be sent to Panorama...but if this time is very long it is normal that logs will be deleted from the device and cannot be sent to anywhere....&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A href="https://live.paloaltonetworks.com/docs/DOC-2396"&gt;What Happens to the Logs if Panorama is Unavailable?&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 05 Feb 2014 03:28:07 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/log-recovery-after-panorama-downtime/m-p/48632#M35813</guid>
      <dc:creator>Retired Member</dc:creator>
      <dc:date>2014-02-05T03:28:07Z</dc:date>
    </item>
  </channel>
</rss>

