Logs not been sent to dedicated log collector by some firewalls

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Logs not been sent to dedicated log collector by some firewalls

L1 Bithead

Hi All,


I have an interesting issue of most of my firewalls not sending logs to the log collector. Have only a 20% success ratio with successful log collection thus far.


I see the below in the below:


Log Collector           : 000710004755

Conn ID                 : lr-

Connection IP           :

Conn Source IP          : lr - def

High speed mode         :    Disabled

Connection Status       : lr - Inactive

DNS                    :

                    msg : Successfully resolved FQDN for connid (lr-, IP (

                 status :     success

              timestamp : 2022/06/01 21:13:31


Registration           :

                    msg :            

                 status :            

              timestamp :            


SSL                    :

                    msg :            

                 status :            

              timestamp :            


TCP                    :

                    msg : Failed to connect to server:

                 status :     failure

              timestamp : 2022/06/01 21:15:39


Conn Uptime             :           0

Re-conn Count           :           0


Rate                    :  0 logs/sec


Connection to the log collector fails. Anybody encountered this before? As I have opened ports for communication between devices.




Community Team Member

Hi @Tobi_Babatunde ,


From the FW management interface can you ping the log collector IP? 

LIVEcommunity team member
Stay Secure,
Don't forget to Like items if a post is helpful to you!

Hi Jay,

Yes I can ping it.


Cyber Elite
Cyber Elite

Hello @Tobi_Babatunde


could you give more details about your environment? Are you using distributed environment with dedicated log collectors? If you are having an issue with a single log collector only, then first thing I would be looking into is health of that log collector and log files from CLI of log collector to see errors: tail lines 200 mp-log ms.log


Kind Regards


Help the community: Like helpful comments and mark solutions.

L1 Bithead

Hi @PavelK, thanks for responding. It's a singular log collector. Have a new problem now, downgraded my panorama management server and log collector to 10.1.5-h2 thinking I was hitting a bug somewhere, now, my log collector is not even connecting to Panorama.




Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!