Panorama VM in HA and log forwarding via syslog

Anon1 — Fri, 22 Sep 2017 20:31:07 GMT

Panorama VM in HA setup and panorama mode

Panorama A: primary-active

Panorama B: secondary-passive

Both have a local log collector and both are added to "default" log collector group. In this log collector group, log forwarding via syslog is configured.

The firewalls are configured to log to Panorama A and Panorama B. This works fine, logs are forwarded via syslog from Panorama A.

But if firewalls are configured to log to Panorama B and Panorama A (reversed order of priority), logs are not forwarded via syslog. Neither by Panorama B (this is what I would expect), nor by Panorama A. In Panorama itself, the logs are shown, just the log forwarding does not work.

Goal is to implement this setup including log forwarding via syslog: "Multiple Log Collectors Per Collector Group"

https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/manage-log-collection/log-collection-deployments/deploy-panorama-virtual-appliances-with-local-log-collectors

Multiple—Assign each firewall to both Log Collectors for redundancy. When you configure the preference list, make Log Collector 1 the first priority for half the firewalls and make Log Collector 2 the first priority for the other half, as illustrated in Figure 2.

Anybody got this setup to work?

Re: Panorama VM in HA and log forwarding via syslog

nawaza — Wed, 31 Jan 2018 16:47:42 GMT

I note its been a while without single reply...

We are about to implement this under Panorama 8.0.7, and I just wanted to please ask that in the absence of any replies can you please share your experience?, did you end up implementing the proposed redundant design?

Thanks in advance

Ajaz

topic Panorama VM in HA and log forwarding via syslog in General Topics

Panorama VM in HA and log forwarding via syslog

Re: Panorama VM in HA and log forwarding via syslog