<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Logs to both Panorama in HA in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192096#M57757</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We have 2 M500 in HA. Lets call them M1 = normally active and M2 = normally passive.&lt;/P&gt;&lt;P&gt;We have PA5000 series firewall and we manage it using the Panorama.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We realised that the Firewall only sends the logs to M1&amp;nbsp;which is normally OK.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;But when we triggered a Panorama failover and M2 active, then the FW did not send logs to M2 but it stored the logs locally.&lt;/P&gt;&lt;P&gt;When we made M1 active again, the firewall sent its stored logs to M1 and then again continued to forward the logs to M1 noramally.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;How can I change this behavious so that the FW always sends the logs to whichever Panorama is active?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks and Regards,&lt;/P&gt;&lt;P&gt;R&lt;/P&gt;</description>
    <pubDate>Mon, 18 Dec 2017 16:46:15 GMT</pubDate>
    <dc:creator>rjdahav163</dc:creator>
    <dc:date>2017-12-18T16:46:15Z</dc:date>
    <item>
      <title>Logs to both Panorama in HA</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192096#M57757</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We have 2 M500 in HA. Lets call them M1 = normally active and M2 = normally passive.&lt;/P&gt;&lt;P&gt;We have PA5000 series firewall and we manage it using the Panorama.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We realised that the Firewall only sends the logs to M1&amp;nbsp;which is normally OK.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;But when we triggered a Panorama failover and M2 active, then the FW did not send logs to M2 but it stored the logs locally.&lt;/P&gt;&lt;P&gt;When we made M1 active again, the firewall sent its stored logs to M1 and then again continued to forward the logs to M1 noramally.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;How can I change this behavious so that the FW always sends the logs to whichever Panorama is active?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks and Regards,&lt;/P&gt;&lt;P&gt;R&lt;/P&gt;</description>
      <pubDate>Mon, 18 Dec 2017 16:46:15 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192096#M57757</guid>
      <dc:creator>rjdahav163</dc:creator>
      <dc:date>2017-12-18T16:46:15Z</dc:date>
    </item>
    <item>
      <title>Re: Logs to both Panorama in HA</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192261#M57769</link>
      <description>&lt;P&gt;Anyone?&lt;/P&gt;</description>
      <pubDate>Tue, 19 Dec 2017 12:32:43 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192261#M57769</guid>
      <dc:creator>rjdahav163</dc:creator>
      <dc:date>2017-12-19T12:32:43Z</dc:date>
    </item>
    <item>
      <title>Re: Logs to both Panorama in HA</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192322#M57781</link>
      <description>&lt;P&gt;Are both M500s in the same Log Collector Group?&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Also, did you review this from the documentation:&lt;/P&gt;&lt;P&gt;&amp;nbsp;- &lt;A href="https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama-high-availability/logging-considerations-in-panorama-ha/logging-failover-on-an-m-series-appliance-or-panorama-virtual-appliance-in-panorama-mode#id4c704c29-5a4d-47bf-b364-624fa182adad" target="_self"&gt;https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama-high-availability/logging-considerations-in-panorama-ha/logging-failover-on-an-m-series-appliance-or-panorama-virtual-appliance-in-panorama-mode#id4c704c29-5a4d-47bf-b364-624fa182adad&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 19 Dec 2017 20:27:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/192322#M57781</guid>
      <dc:creator>jvalentine</dc:creator>
      <dc:date>2017-12-19T20:27:16Z</dc:date>
    </item>
    <item>
      <title>Re: Logs to both Panorama in HA</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/200645#M59325</link>
      <description>&lt;P&gt;Thanks&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/22017"&gt;@jvalentine&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The document link helped!&lt;/P&gt;</description>
      <pubDate>Thu, 15 Feb 2018 09:50:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/logs-to-both-panorama-in-ha/m-p/200645#M59325</guid>
      <dc:creator>rjdahav163</dc:creator>
      <dc:date>2018-02-15T09:50:26Z</dc:date>
    </item>
  </channel>
</rss>

