- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
12-01-2010 10:43 AM
Hi,
Can i know when the log space uses 100% of the quota, will delete the old log to recycle to space, or do PAN just delete portion of the log? if it only delete a certain percentage of the log , how many percent of it will be removed? or it delete the portion of log based on time?
Regards,
Alan
12-02-2010 08:37 AM
By default at about 80% the palo alto will start purging the disk.
12-05-2010 04:46 AM
Hi,
Can i know how much data will be purge?
Any command to show in PAN?
12-06-2010 11:53 AM
Hello,
You can try running command 'show system logdb-quota' to determine amount of data being purged.
10-10-2012 08:06 AM
Hello,
This is not very clear on Palo box, since months we have issue that every
week we have alarm indicating that the log was exceeded 80 of the quota, in
fact we want to log all traffics and don’t want to disable logging on some
rules, I monitored during the week the logdb-quota and Palo don’t clear/purge
or delete older log at 80%, we opened a case on Palo support from three weeks
and the only response we get is that we have to disable some logging on our
rules.
So will be grate that Palo clarify this issue and response the question
below:
Thanks for your answer and help
10-10-2012 10:48 AM
Hi,
Please see below and see if that helps answer your questions.
If you are looking for partially deleting the logs the work around would be If you resize the partition, and commit and then size it back after the commit, you should essentially remove the last the oldest logs. For example if you have 1 GB of traffic logs, resize the partition to 500MB, and commit, you will remove the oldest 500MB of logs.
5. Also if you would like to request a feature to delete logs partially please contact your local SE (Sales Engineer) and he should be able to file an enhancement request for you.
Hope this helps.
Thanks
Numan
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!