Log recovery after Panorama downtime

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Log recovery after Panorama downtime

L0 Member

If the Virtual Panorama goes down for a several hours for maintenance and then comes back online will the Panorama reliably request and receive the updates from the individual firewalls logs for the time it was down so that the logs will be complete? What caveat's may be expected.

Customer has a Virtual Panorama that collects logs from several firewalls. The log volume is needing to be expanded. The customer would like to take down the Panorama and attach a larger volume and copy the Logdb over to the new volume and then bring it back online and continue receiving the logs without a loss of log data.

Customer is already aware that copying over the logdb is not supported. The question is after doing this will the logs be collected on the Panorama during the downtime.

1 accepted solution

Accepted Solutions

L6 Presenter

You will not loose your logs if downtime is not very long.When Panorama is not accessible, from that time paloalto will mark the timestamp...when panorama will become available...Then all logs will be sent to Panorama...but if this time is very long it is normal that logs will be deleted from the device and cannot be sent to anywhere....

What Happens to the Logs if Panorama is Unavailable?

View solution in original post

1 REPLY 1

L6 Presenter

You will not loose your logs if downtime is not very long.When Panorama is not accessible, from that time paloalto will mark the timestamp...when panorama will become available...Then all logs will be sent to Panorama...but if this time is very long it is normal that logs will be deleted from the device and cannot be sent to anywhere....

What Happens to the Logs if Panorama is Unavailable?

  • 1 accepted solution
  • 2742 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!