Changing max logging rate to 50000 on VM-100

Reply
Highlighted
L1 Bithead

Changing max logging rate to 50000 on VM-100

I followed the learning article What Units are used for Max-packet-rate and Max-log-rate?

on a PA VM-100:

admin@PA-VM> show system info
...
vm-license: VM-100
vm-mode: VMWare ESXi
sw-version: 8.0.3
...

And the max logging rate modification does not seem to work:

 

admin@PA-VM> show running logging
Max. logging rate: 1280 cnt/s
Max. packet logging rate: 2560 KB/s
Traffic log generation rate: 0 cnt/s
Threat log generation rate: 0 cnt/s
Log sent rate: 1280 cnt/s
Current traffic log count: 0 
Current threat log count: 0 
Random traffic log drop: off 
Log suppression: on
default-policy-logging: off

admin@PA-VM> configure
Entering configuration mode
[edit] 
admin@PA-VM# set deviceconfig setting logging max-log-rate 50000
[edit] 
admin@PA-VM# commit
 
Commit job 2 is in progress. Use Ctrl+C to return to command prompt
..55%98%........100%
Configuration committed successfully
[edit] 
admin@PA-VM# exit
Exiting configuration mode
admin@PA-VM> show system setting logging
Max. logging rate: 1280 cnt/s
Max. packet logging rate: 2560 KB/s
Traffic log generation rate: 0 cnt/s
Threat log generation rate: 0 cnt/s
Log sent rate: 1280 cnt/s
Current traffic log count: 0 
Current threat log count: 0 
Random traffic log drop: off 
Log suppression: on
default-policy-logging: off

 

After some painful dichotomy exercise :) , I could find that the maximum value that I can set is somewhere between 6800 and 6900.

Any idea on this behavior?

Is the maximum value platform dependant? Any link to some doc?

L4 Transporter

Re: Changing max logging rate to 50000 on VM-100

Hi @hgiguelay

 

Although the below link is about the Panorama design it does provide the number of supported logs per second across each model.

https://live.paloaltonetworks.com/t5/Management-Articles/Panorama-Sizing-and-Design-Guide/ta-p/72181

 

According to the below table the VM-Series supports a maximum of 2,250 logs per second; hence, setting the logging rate to "50000" will not be supported.

Log Fowarding.PNG

I hope this helps

 

L1 Bithead

Re: Changing max logging rate to 50000 on VM-100

Thanks a lot @Willian for pointing the references. However, the documented 2250 limitation contradicts the maximum logging rate value that I could set/test and validate: 6800.

Community Manager

Re: Changing max logging rate to 50000 on VM-100

please revisit the article, it was updated to reflect more flavors of VM


Help the community: Like helpful comments and mark solutions
Reaper out
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!