topic Re: Log retention in General Topics

Log retention

Joshan_Lakhani — Tue, 12 May 2020 18:32:24 GMT

how long will our firewall keeps logs locally. when i run this command "show show system logdb-quota it's show the Traffic Log is for 26 Days. it means the normal user traffic logs will keep maximum 26 days , right Please Suggest

Re: Log retention

OtakarKlier — Tue, 12 May 2020 18:36:47 GMT

Hello,

The length of time answer is 'it depends'. I know I'm not a fan of it as well. However it depends on the model of the PAN you are running and how much disk space was located to the logs partition. Basically more traffic = more logs = less days of retention.

Regards,

Re: Log retention

Joshan_Lakhani — Tue, 12 May 2020 18:52:19 GMT

thank you for your response

what is mean by current Retention = 26days ?

My PAN Model is 3220 and i have allocate 35G for traffic logs

Re: Log retention

OtakarKlier — Tue, 12 May 2020 19:37:33 GMT

Hello,

Not sure I understand what you mean by your question:

"what is mean by current Retention = 26days ?"

To clarify what I was saying, the more traffic that flows through the firewall, the more logs are generate, so more space is taken up by the logs. It's almost impossible to gauge how much retention you will get.

Hope that helps.

Re: Log retention

OtakarKlier — Tue, 12 May 2020 19:43:25 GMT

Hello,

Also I would suggest you offload the logs to a SIEM for longer retention and analysis purposes. Also historical data if the PAN should wipe out its logs or the unit needing to be replaced.

Regards,