Log redistribution after adding additional log disk.

cancel
Showing results for 
Search instead for 
Did you mean: 

Log redistribution after adding additional log disk.

L3 Networker

Recently we added a 2TB log disk to this virtual Panorama running 8.1.19 on VMWare ESXi 6.5

 

 

Once adding, the log redistribution process on the local log collector started as has been progressing very slowly. Over the course of 15 hours this job progressed to 7%

 

>show log-collector all

......

 

Redistribution status:    pending --- 7%

 

 

 

How long should this job take to complete?

 

Will this impact on daily operations in any way?

 

We followed this https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/set-up-the-panorama-vi... (which has no mention of log redistribution or the expected time)

 

 

4 REPLIES 4

Cyber Elite
Cyber Elite

@Jatin.Singh 

 

As far as I know it should not impact any daily operations and it takes a while to distribute the logs to newly added disks.

Also It depends on your current log storage.

 

Hope this helps!

 

Regards

MP

Thank you for getting back on this.

It is still sitting around 8% and by the looks of it is going to take a week for this.

Is there any way we can speed up this process as we have planned PAN-OS upgrade for panorama tomorrow.

There is no information on the Redistribution  of logs in any documentation.

 

So my question is in that case 

 

Can we run ahead with Panorama PAN-OS upgrades whilst the log re-distribution occurs?

@Jatin.Singh 

 

As far as I know there is no way you can speed up the process?

After the log redistribution Logdb will get changes and elasticsearch too, so please upgrade the Panos after completion of redistribution

 

 

Regards

MP

@Jatin.Singh 

Also you will lose Data if you do the PAN OS upgrade during the log redistribution.

 

Regards

 

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!