Log retention

[Joshan_Lakhani]

how long will our firewall  keeps logs locally. when i run this command "show show system logdb-quota it's show the Traffic Log is for 26 Days. it means the normal user traffic logs will keep maximum 26 days , right Please Suggest 

[OtakarKlier · Accepted solution]

Hello,

The length of time answer is 'it depends'. I know I'm not a fan of it as well. However it depends on the model of the PAN you are running and how much disk space was located to the logs partition. Basically more traffic = more logs = less days of retention.

Regards,

[Joshan_Lakhani]

thank you for your response 

what is mean by current Retention = 26days ?

My PAN Model is 3220  and i have allocate 35G  for traffic logs

[OtakarKlier]

Hello,

Not sure I understand what you mean by your question:

"what is mean by current Retention = 26days ?"

To clarify what I was saying, the more traffic that flows through the firewall, the more logs are generate, so more space is taken up by the logs. It's almost impossible to gauge how much retention you will get.

Hope that helps.

[OtakarKlier]

Hello,

Also I would suggest you offload the logs to a SIEM for longer retention and analysis purposes. Also historical data if the PAN should wipe out its logs or the unit needing to be replaced.

Regards,