log compression in Palo alto

Reply
L4 Transporter

log compression in Palo alto

 

Need to know if palo alto firewall or Panorama supports log compression or not?

 

L5 Sessionator

Re: log compression in Palo alto

Hey @MP18

 

If you have log redundancy enabled on Panorama, you can use the below command to below command to turn on data compression.

 

debug log-collector inter-log-collector data-compression set on

 

I don't believe there's any other sort of log compression features outside of this - at least that you can turn on; I'm sure there will be compression going on behind the scenes in regards to compressing logs.


A little story in a scenario where we had to use this command - we had a case before where we were sending a lot of logs to Panorama - and because the log redundancy option was enabled, the Log Collector had to start throttling incoming logs so we saw 10+ hours of delay in the traffic logs. The above command, in conjunction with the LC preference list solved our particular issue ;)

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!