Panorama Managed collectors - Default and M500 Log collector

[MP18]

We have Panorama M100 in Panorama Mode.

They are in HA pair.

Also we have 2 M500 as dedicated log collector mode.

Under Panorama managed collectors  I see default is also checked along with 2 dedicated log collectors.

Need to know why default option is checked along with M500?

[Remo]

Hi @MP18

This is the default (local) log collector that comes with a Panorama in "panorama-mode". If you don't want this one you need to assign all firewalls to the dedicated log collectors and then change the panorama mode to "management-only".

[MP18]

If i do that then will i lose gui access to panorama ?

Will it break the Fw connections to the panorama?

[Remo]

There will be no change in panorama functionality except that it is then only used for managing the firewalls and showing logs - it will no longer be able to receive logs.

[MP18]

but it will still receive the logs from the M500 right?

Whe we pull up report then it will get logs from M500?

[Remo · Accepted solution]

Hi @MP18

Panorama will only be there to show logs from your logs collectors. The logs itself will stay on the collectors. So, no it will not receive logs - but if you already forward the logs from the firewalls to the coĺlectors, then also now panorama does not receive logs.

[MP18]

Many Thanks for answering the questions