can we forward logs to two different logs collectors from same fiirewall?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

can we forward logs to two different logs collectors from same fiirewall?

L3 Networker

We want to store log copy on two collectors for redundancy.

Note : We don't want to go with collector group(with both collectors in same group) config with redundancy, as this config half the space.

Example. Panorama M200 is in HA with above config , we get search engine quota in single panorama is 7.5 TB.

Search Engine Quota Stats: 
Total Disk(s) Space: 7511015 MB

 

Also is it possible to forward logs from one panorama to another panorama? We have panorama vm in spare. What if we can forward logs from collector group to Panorama VM. If possible , how we can implement it ?

 

Please suggest if there is any other design which can fulfill our requirement.

 

2 REPLIES 2

Cyber Elite
Cyber Elite

You'll need additional collectors (standalone collectors) which you can set in redundancy

Else you could consider setting a backup syslog to receive a secondary log stream

(You can't forward.logs from panorama to another panorama)

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Can I add third collector in collector group , if Panorama is in HA and collectors of both panorama is already in collector group ?

 

 

  • 1843 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!