02-03-2014 10:44 AM
If the Virtual Panorama goes down for a several hours for maintenance and then comes back online will the Panorama reliably request and receive the updates from the individual firewalls logs for the time it was down so that the logs will be complete? What caveat's may be expected.
Customer has a Virtual Panorama that collects logs from several firewalls. The log volume is needing to be expanded. The customer would like to take down the Panorama and attach a larger volume and copy the Logdb over to the new volume and then bring it back online and continue receiving the logs without a loss of log data.
Customer is already aware that copying over the logdb is not supported. The question is after doing this will the logs be collected on the Panorama during the downtime.
02-04-2014 07:28 PM
You will not loose your logs if downtime is not very long.When Panorama is not accessible, from that time paloalto will mark the timestamp...when panorama will become available...Then all logs will be sent to Panorama...but if this time is very long it is normal that logs will be deleted from the device and cannot be sent to anywhere....
02-04-2014 07:28 PM
You will not loose your logs if downtime is not very long.When Panorama is not accessible, from that time paloalto will mark the timestamp...when panorama will become available...Then all logs will be sent to Panorama...but if this time is very long it is normal that logs will be deleted from the device and cannot be sent to anywhere....
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
