Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Changing max logging rate to 50000 on VM-100

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Changing max logging rate to 50000 on VM-100

L1 Bithead

I followed the learning article What Units are used for Max-packet-rate and Max-log-rate?

on a PA VM-100:

admin@PA-VM> show system info
...
vm-license: VM-100
vm-mode: VMWare ESXi
sw-version: 8.0.3
...

And the max logging rate modification does not seem to work:

 

admin@PA-VM> show running logging
Max. logging rate: 1280 cnt/s
Max. packet logging rate: 2560 KB/s
Traffic log generation rate: 0 cnt/s
Threat log generation rate: 0 cnt/s
Log sent rate: 1280 cnt/s
Current traffic log count: 0 
Current threat log count: 0 
Random traffic log drop: off 
Log suppression: on
default-policy-logging: off

admin@PA-VM> configure
Entering configuration mode
[edit] 
admin@PA-VM# set deviceconfig setting logging max-log-rate 50000
[edit] 
admin@PA-VM# commit
 
Commit job 2 is in progress. Use Ctrl+C to return to command prompt
..55%98%........100%
Configuration committed successfully
[edit] 
admin@PA-VM# exit
Exiting configuration mode
admin@PA-VM> show system setting logging
Max. logging rate: 1280 cnt/s
Max. packet logging rate: 2560 KB/s
Traffic log generation rate: 0 cnt/s
Threat log generation rate: 0 cnt/s
Log sent rate: 1280 cnt/s
Current traffic log count: 0 
Current threat log count: 0 
Random traffic log drop: off 
Log suppression: on
default-policy-logging: off

 

After some painful dichotomy exercise 🙂 , I could find that the maximum value that I can set is somewhere between 6800 and 6900.

Any idea on this behavior?

Is the maximum value platform dependant? Any link to some doc?

1 accepted solution

Accepted Solutions

please revisit the article, it was updated to reflect more flavors of VM

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

3 REPLIES 3

Hi @hgiguelay

 

Although the below link is about the Panorama design it does provide the number of supported logs per second across each model.

https://live.paloaltonetworks.com/t5/Management-Articles/Panorama-Sizing-and-Design-Guide/ta-p/72181

 

According to the below table the VM-Series supports a maximum of 2,250 logs per second; hence, setting the logging rate to "50000" will not be supported.

Log Fowarding.PNG

I hope this helps

 

Thanks a lot @acc6d0b3610eec313831f7900fdbd235 for pointing the references. However, the documented 2250 limitation contradicts the maximum logging rate value that I could set/test and validate: 6800.

please revisit the article, it was updated to reflect more flavors of VM

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 1 accepted solution
  • 5723 Views
  • 3 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!