topic Re: add new local log collector in collector group in General Topics

add new local log collector in collector group

Deepak_K — Mon, 18 Jan 2021 08:14:26 GMT

We are using standalone M-200 for 5 locations firewall and created collector group with single local log collector of M200.

We are deploying our new M-200 at another location and it will be in HA with our existing M-200.

This new M-200 will be Active-Secondary panorama and we will add local log collector of it in existing collector group.

So in existing collector group there will be one local log collectors of each M-200.

Q. If we add secondary peer local log collector in collector group , is there any impact on stored logs ?

Re: add new local log collector in collector group

reaper — Mon, 18 Jan 2021 10:15:20 GMT

as long as they're both part of the same group there wont be an impact on the existing one

you could consider creating 2 'device log forwarding' configurations ince you are placing the new collector in a different location:

the 'top' collector in the device log forwardig' will be the primary collector for all the firewalls in the same group

if you create 2 groups, each containing all the collectors, but switching the 2 collectors's priority, and then adding firewalls for each location, they will log to the 'nearest' collector preferrably and remote if the local one is down