Panorama. howto retrive old logs ?

[ta185020]

Hi,

I have panoram installed and configured. I have my PA FW that is now sending traffic logs and system logs, and threat logs to the Panorama.

1. How can I configure PA FW to send URL logs to the Panorama ?? as I do not see any url logs in the panoram from the PA FW ?

2. Panoram is now reading the current logs, how can I export the existing 1 month old logs from PA FW to panorama ?

Please advise.

Rgds,

Tauseef

[bpappas]

In your screenshot you are showing the system log forwarding configuration screen.

You want to set up the log forwarding for traffic, threat, etc. That is done on the Object tab -> log forwarding

There you will see options for forwarding the traffic and threat logs, similar to what you see on the system log forwarding screen that you attached to your last comment.

-Benjamin

[migration]

Has this changed, can we get logs from the firewall into Panorama?  Say, after a Panorama crash or maybe the Panorama was turned off for a period of time and missed logs how do we sync the logs of the Panorama with the logs of the firewall?

[ppatel]

Hi ,

As said earlier, if your Panorama is shut down for a specifc period of time (Disconnected from the devices), there is no way to export the old logs from the devices to to Panorama as of now. (Has to be a Feature Request) The only way is to manually export the logs from the Firewall via ftp,scp or CSV.

For traffic, threat, URL filtering logs , you need to have Log forwarding prifiles and applies to the poliices.

According to my understanding, over the releases of major Software versions, the GUI appearence might have changed but the way to set it up is still the same.

Regards,

Parth

[dhill6]

You can start up a case with PAN Support and they should be able to obtain this for you. However, the logs will only be as far back as the Device (i.e. firewall) has in it's database.