topic Re: M-100 default log collector in General Topics

M-100 default log collector

Kaliman — Mon, 14 Nov 2016 18:01:35 GMT

Hello,

in the followind doc, Firgure: Single Default Log Collector per Collector Group.

Looks like we can assign Firewalls to send logs to the Primary Panorama, Also it looks like we can assign firewalls to send logs to only the Secondary Panorama.

https://www.paloaltonetworks.com/documentation/70/panorama/panorama_adminguide/manage-log-collection/deploy-panorama-with-default-log-collectors#78391

However, on the following document

https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/panorama-high-availability/logging-considerations-in-panorama-ha

indicates that managed devices can send logs to only the one peer.

Could you please help me to decipher, this mistery.

thank you

Re: M-100 default log collector

rmonvon — Wed, 16 Nov 2016 14:51:01 GMT

Hi...When you have 2 M100s in HA, you can define both M100s to act as log collectors. The managed devices will forward logs to either one per your configuration. Let's say you have 6 managed devices/PAs on your network. You can have devices 1,2,3 forward to M-100-A while devices 4,5,6 forward their logs to M-100-B.

Re: M-100 default log collector

Kaliman — Thu, 17 Nov 2016 03:11:53 GMT

Hello,

Thank you so much for your reply.

so, if I want to have only the Default log collector in each Panorama. I don't need to configure the Secondary log collector to the primary. is this correct?

Again thank you in advance.

Re: M-100 default log collector

Kaliman — Tue, 22 Nov 2016 17:49:52 GMT

I got it fixed.

the documentation is not clear. Needs some work.