10-15-2021 09:24 AM
I am curious to know which technology is using in Panoroma logging disk to store the logs or disaster recovery. I have added 6TB virtual disk in panoroma now it is showing DiskA, DiskB, DiskC,DiskD, DiskE. If any one Disk get faulty how data will get from the faulty disk.
10-15-2021 06:39 PM
Thank you for quick reply @rajendra-kumar
All disks will be used and logs will be distributed among all of them.
Regarding data on faulty disk, I can only speak for my own experience when I lost one of the log collectors (Enable log redundancy across collectors was not enabled). I could still search data that resided on other log collector, but not on faulty one. Since I was not aware what logs were located on the log collector that was not online at that time depending on the log I queried I was getting incomplete log search. I assume the same will happen if you lose a single disk. You will not be able to get logs from faulty disk.
Regarding what you mentioned with single log collector in log collector group, it seems like you did not configure local log collector on your Panorama passive node. Could you please make sure you added local log collector (The link is for M-100, but concept is the same): https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMTXCA4 Then you should be able to add additional log collector to existing log collector group from: Panorama > Collector Groups > [Log Collector Group Name] > Add. After this step the option: "Enable log redundancy across collectors" will work.
10-15-2021 06:54 PM
Thank you very much for your quick response, really its great help for me.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!