Logs to both Panorama in HA

[rjdahav163]

Hi

We have 2 M500 in HA. Lets call them M1 = normally active and M2 = normally passive.

We have PA5000 series firewall and we manage it using the Panorama. 

We realised that the Firewall only sends the logs to M1 which is normally OK.

But when we triggered a Panorama failover and M2 active, then the FW did not send logs to M2 but it stored the logs locally.

When we made M1 active again, the firewall sent its stored logs to M1 and then again continued to forward the logs to M1 noramally.

How can I change this behavious so that the FW always sends the logs to whichever Panorama is active?

Thanks and Regards,

R

[rjdahav163]

Anyone?

[jvalentine · Accepted solution]

Are both M500s in the same Log Collector Group?  

Also, did you review this from the documentation:

 - https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama-high-availab...

[rjdahav163]

Thanks @jvalentine 

The document link helped!