Moving/importing logs after HD failure

[darren_g]

Hi.

Recently, owing to an unplanned abrupt shutdown of my active firewall, I ended up with a hard drive corruption which prevented it from booting up (thank $deity for HA pairs).

Quite apart from PA's *ridiculously* bad response time to replace the hard drive (which is being/will be discussed with my support partner, trust me), I need to know if anyone knows how I can get the logs from the old drive onto the new one?

I spent about 4 hours copying them before I installed the new drive - and the first thing the damn thing did on bootup was erase the private data - including the logs I had painstakingly copied to the device.

So - does anyone know if I can get the log files *back* onto the device before I kick it back into "active" mode? Or do I need to shut it down now that it's got all its config and stuff back on it, then copy the files back from the old drive again and put the new one back into service? I can recover all but one day of the old logs - and give that there's almost 12 months of log data on the old drive, I'm loathe to lose it if I can avoid it.

Thanks for any input.

[HULK]

Hello Darren,

Which Platform it is...? In PAN-5000 platform with RAID enabled, can recover old logs from the HDD.

Thanks

[darren_g]

PA2000.

I can get (have got) the old data - I just don't see any method (FTP, SCP etc) to put it back on the new drive bar pulling it out and using an external drive cradle.

[hshah]

You may want to approach PAN TAC, see if they can move data from root via SCP.

[HULK]

Hello Darren,

This DOC may help you to import Logs into PAN FW.

CLI Commands to Export/Import Configuration and Log Files

Else, PAN support engineer would be able to copy the logdb file into the proper directory.

Thanks