export all logs from PA to Panorama

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

export all logs from PA to Panorama

Not applicable

Hi,

I have config PA-2050 to send logs to panorama, using this doc:

https://live.paloaltonetworks.com/docs/DOC-1267à

But i have old logs in PA that stay there.  Just the new logs are send to panorama.

There is a way to export all logs to panorama? i need to keep those log in the panorama engin for investigation purpose.

thanks!

4 REPLIES 4

L5 Sessionator

Since you installed the PA before the Panorama, the old logs cannot be forwarded to it. Hope this discussions helps:

https://live.paloaltonetworks.com/message/6217#6217

Not applicable

Palo Alto should add a command to do that export.  its safe to do this, because logs in appliance have not been altered.  We should be able to do this and its logical function to do.  Many people start by buying appliance first.  then later find they will be better to use panorama for logging purpose.

It seems like there is a way that you can force all the old logs on the  PA device to the panorama. Open a case with support, we will be able to help you with this.

https://live.paloaltonetworks.com/thread/2494

Thanks,

Sandeep T

kool thanks i will do that, i waiting one other case to be close then i will open a new one, with this new subject, lol

  • 2347 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!