topic Export logs from local log collector to dedicated log collector in General Topics

Export logs from local log collector to dedicated log collector

faizankhurshid — Wed, 16 May 2018 07:06:37 GMT

Hello

Is there any procedure I can use to export logs from local log collector to dedicated log collector. As previously firewall was sending logs to local log collector and now sending logs to dedicated log collector.

@reaper

Regards,

Re: Export logs from local log collector to dedicated log collector

reaper — Wed, 16 May 2018 19:44:09 GMT

hi @faizankhurshid

what do you mean exactly by local log collector? a PA-7000 chassis with the log card? or do you simply mean the local log storage on a standalone firewall?

You can only start forwarding 'new' logs once you''ve configured a remote log collector, as logs will start to get 'marked' for forwarding after you've set the feature. Old logs will not be forwarded.

You can export the log database for storage but unortunately you won't be able to import that into a log collector, as far as I know

Re: Export logs from local log collector to dedicated log collector

faizankhurshid — Thu, 17 May 2018 08:23:00 GMT

@reaper Sorry for the confusion.

7K was sending the logs to Panorama M100 with local log collector (hybrid mode) in HA.

Now I have dedicated log collector M100, I have added LC but I want to know if I point firewalls to new LC then how I can access the old logs.

1- Panorama M100 can show me the old logs that are on local log collector of Panorama M100?

2- Can I put local log collector of Panorama M100 with new dedicated LC in same log collector group so new LC can sync the old logs from local log collecotr using log redundancy feature?

Re: Export logs from local log collector to dedicated log collector

SachinGargNTT — Fri, 25 Aug 2023 08:40:18 GMT

Any update on this?

how to deal with keeping old logs or how to migrate them to some external repository/place for audit purposes for example.

Is there any other way to keep them without having M100 all the time online which is an old log-collector?

Re: Export logs from local log collector to dedicated log collector

SachinGargNTT — Fri, 25 Aug 2023 13:15:50 GMT

Any update on this?

how to deal with keeping old logs or how to migrate them to some external repository/place for audit purposes for example.

Is there any other way to keep them without having M100 all the time online which is an old log-collector?