topic Re: Increase Panorama logging in General Topics

Increase Panorama logging

MikeC — Thu, 14 Mar 2019 21:45:42 GMT

I currently have a virtual Panorama on esxi running version 8.1.x in legacy mode. The VM is configured with a system disk and an additional 500GB disk for logging. The 500GB is proving to be not enough as I'm only able to keep a little of 1 month of logs.

I have asked this question to support, but could not really get a clear answer. Is it possible to shut down panorama and expand the existing 500GB disk to 2TB? Not sure if Panorama will recognize the unallocated space when the VM powers back on.

If this not an option, what is suggested? Should I convert from legacy to panorama mode? I'm still trying to read the caveats of doing that. I'd prefer not to lose any of the existing logs

Re: Increase Panorama logging

Raido_Rattameister — Fri, 15 Mar 2019 04:17:59 GMT

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/expand-log-storage-capacity-on-the-panorama-virtual-appliance/preserve-existing-logs-when-adding-storage-on-panorama-virtual-appliance-in-legacy-mode.html#

Re: Increase Panorama logging

MikeC — Sat, 16 Mar 2019 02:40:51 GMT

thanks. I was already aware of this one. I was wondering if it's possible to increase the space without deploying a new panorama

Re: Increase Panorama logging

BPry — Sun, 17 Mar 2019 20:25:38 GMT

@MikeC,

Last bullet point on the page that @Raido_Rattameister linked you. It's possible, but it's a more envolved process, and if you haven't done it before with support to feel comfortable with the process you would want to go through it with them so they can assist in migrating the log files.

Usually this sort of ticket will get passed to someone that's actually done it before, so if your original TAC member doesn't express confidence in the task, or you don't feel confident in them performing the task, request a more senior member.

Re: Increase Panorama logging

MikeC — Sun, 17 Mar 2019 20:38:54 GMT

Hi @BPry ,

Yes, this is the confusing part. This is the same link that I discussed with support. it sounded like it can be done, however, support said this option is only used if I were to deploy a new Panorama. The way it was explained was, setup a new Panorama VM and then we can copy the old logs to new Panorama.

I should probably escalate the case.

Re: Increase Panorama logging

MikeC — Sun, 17 Mar 2019 21:02:12 GMT

@BPry @Raido_Rattameister

Maybe another option that makes more sense is to switch from legacy mode to panorama mode? Do you see any downsides to doing this?