Log redistribution after adding additional log disk.

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Log redistribution after adding additional log disk.

L3 Networker

Recently we added a 2TB log disk to this virtual Panorama running 8.1.19 on VMWare ESXi 6.5



Once adding, the log redistribution process on the local log collector started as has been progressing very slowly. Over the course of 15 hours this job progressed to 7%


>show log-collector all



Redistribution status:    pending --- 7%




How long should this job take to complete?


Will this impact on daily operations in any way?


We followed this https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/set-up-the-panorama-vi... (which has no mention of log redistribution or the expected time)




Cyber Elite
Cyber Elite



As far as I know it should not impact any daily operations and it takes a while to distribute the logs to newly added disks.

Also It depends on your current log storage.


Hope this helps!




Help the community: Like helpful comments and mark solutions.

Thank you for getting back on this.

It is still sitting around 8% and by the looks of it is going to take a week for this.

Is there any way we can speed up this process as we have planned PAN-OS upgrade for panorama tomorrow.

There is no information on the Redistribution  of logs in any documentation.


So my question is in that case 


Can we run ahead with Panorama PAN-OS upgrades whilst the log re-distribution occurs?



As far as I know there is no way you can speed up the process?

After the log redistribution Logdb will get changes and elasticsearch too, so please upgrade the Panos after completion of redistribution





Help the community: Like helpful comments and mark solutions.


Also you will lose Data if you do the PAN OS upgrade during the log redistribution.





Help the community: Like helpful comments and mark solutions.
  • 4 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!