Upgrading 7.1 to 8.0: New Log Storage

[RSporbert]

Hi

We are upgrading to 8.0 and have noticed the cavet about new log storage in 8.0. We do not have log collectors setup, but are collecting logs in Panorama (threat and traffic only) and wonder if the existing log migration applies to these as well?

Thanks in advance for any advice,

Rebecca

[Fengrui]

 @jdelio Thanks Joe, we do have dedicated log collector, so the serial number in the command would be from one of the firewalls sending logs to the collector? And this means I will need to convert log for each firewall?

[jdelio]

@Fengrui,

The command is:

> request logdb migrate lc serial-number<serial_number> start

So, I would say that the serial # is the actual Log Collector serial #.. 

Also, after looking at this again, this command would be run on Panorama CLI..  just wanted to clarify..  As Panorama talks with 1 or more Log Collectors. 

[Fengrui]

@jdelio, thanks Joe.

[howardtopher]

I just upgraded our panorama to 8.0.2.  We don't have any external log collectors and only store logs locally on panorama.  I'm don't seem to be able to start the log migration process.  The error it gives is the serial numer is invalid.  I'm using the panorama serial number in the command.  Am I doing something wrong?  Do I have to convert to "panorama mode" first?

> request logdb migrate lc serial-number xxxxxxxxxxx start

Server error :  xxxxxxxxxxx is invalid serial-number.Current target-vsys is none
 request -> logdb -> migrate -> lc -> serial-number is invalid

[jdelio]

@Fengrui. @howardtopher and If you do not have a seperate log collector on Panorama, I was able to find the following talking about this here:

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/panorama-features/logging-...

This link talks specifically about the Logging enhancements in PAN-OS 8.0.

I talks about upgrading the logs locally on Panorama first, with lots of instructions. So Please read that first, as it should help explain what is going on and what needs to happen next.  There is also another command to run, AFTER upgrading the logs.

> request logdb migrate vm start

Please let us know if you have any additional questions about this.