Export logs from local log collector to dedicated log collector

[faizankhurshid]

Hello

Is there any procedure I can use to export logs from local log collector to dedicated log collector. As previously firewall was sending logs to local log collector and now sending logs to dedicated log collector.

@reaper

Regards,

[reaper]

hi @faizankhurshid

what do you mean exactly by local log collector? a PA-7000 chassis with the log card? or do you simply mean the local log storage on a standalone firewall?

You can only start forwarding 'new' logs once you''ve configured a remote log collector, as logs will start to get 'marked' for forwarding after you've set the feature. Old logs will not be forwarded.

You can export the log database for storage but unortunately you won't be able to import that into a log collector, as far as I know

[faizankhurshid]

@reaper Sorry for the confusion. 

7K was sending the logs to Panorama M100 with local log collector (hybrid mode) in HA. 

Now I have dedicated log collector M100, I have added LC but I want to know if I point firewalls to new LC then how I can access the old logs. 

1- Panorama M100 can show me the old logs that are on local log collector of Panorama M100?

2- Can I put local log collector of Panorama M100 with new dedicated LC in same log collector group so new LC can sync the old logs from local log collecotr  using log redundancy feature?

[SachinGargNTT]

Any update on this?

how to deal with keeping old logs or how to migrate them to some external repository/place for audit purposes for example.

Is there any other way to keep them without having M100 all the time online which is an old log-collector?

[SachinGargNTT]

Any update on this?

how to deal with keeping old logs or how to migrate them to some external repository/place for audit purposes for example.

Is there any other way to keep them without having M100 all the time online which is an old log-collector?