Log file quota when is reach 100%

[jeffhooi]

Hi,

Can i know when the log space uses 100% of the quota,  will delete the old log to recycle to space, or do PAN just delete portion of the log? if it  only delete a certain percentage of the log , how many percent  of it  will be removed? or it delete the portion of log based on time?

Regards,

Alan

[jnguyen]

By default at about 80% the palo alto will start purging the disk.

[jeffhooi]

Hi,

Can i know how much data will be purge?

Any command to show in PAN?

[odaos]

Hello,

You can try running command 'show system logdb-quota' to determine amount of data being purged.

[BSadozai]

Hello,

This is not very clear on Palo box, since months we have issue that every
week we have alarm indicating that the log was exceeded 80 of the quota, in
fact we want to log all traffics and don’t want to disable logging on some
rules, I monitored during the week the logdb-quota and Palo don’t clear/purge
or delete older log at 80%, we opened a case on Palo support from three weeks
and the only response we get is that we have to disable some logging on our
rules.

So will be grate that Palo clarify this issue and response the question
below:

• Is Palo box purge/clear or delete older logs or it
  overwrite older logs ?
• If it  purge/clear
  or delete, how many volume or % ?
• Is there a specific time that Palo box do this or it do
  it as soon as 80% was reached ?
• Is there a way to configure Palo box to clear or
  deleted older logs from specific time ? if not way ( this is basic
  configuration of system that have to be available)
• How can we sort out this issue? Without disabling logging
  on some rules?

Thanks for your answer and help