M-100 default log collector

[Kaliman]

Hello,

in the followind doc, Firgure: Single Default Log Collector per Collector Group.

Looks like we can assign Firewalls to send logs to the Primary Panorama, Also it looks like we can assign firewalls to send logs to only the Secondary Panorama.

https://www.paloaltonetworks.com/documentation/70/panorama/panorama_adminguide/manage-log-collection...

However, on the following document

https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/panorama-high-availab...

indicates that managed devices can send logs to only the one peer.

Could you please help me to decipher, this mistery.

thank you

[rmonvon]

Hi...When you have 2 M100s in HA, you can define both M100s to act as log collectors.  The managed devices will forward logs to either one per your configuration.  Let's say you have 6 managed devices/PAs on your network.  You can have devices 1,2,3 forward to M-100-A while devices 4,5,6 forward their logs to M-100-B.

[Kaliman]

Hello,

Thank you so much for your reply.

so, if I want to have only the Default log collector in each Panorama. I don't need to configure the Secondary log collector to the primary. is this correct?

Again thank you in advance.

[Kaliman · Accepted solution]

I got it fixed. 

the documentation is not clear. Needs some work.