VM-200 log disk resizing

[Jatin.Singh]

Hi,

Can we know if the following is possible with Palo Alto?

1.Resize the Log drive on a functional Palo VM without losing all content

We’ve always had a secondary larger log drive when these were built – not big enough mind you.

i.e. an offline resize with something like GParted instead of deleting the existing log drive and recreating a bigger log drive.

2.     Rebuild the Palo appliance without losing logging content

If an appliance is rebuilt, and an existing larger log drive is added, is it smart enough to see that drive as usable, rather than reformat&partition it as if a brand new blank disk?

[nikoolayy1]

Have you reviewed this article?

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-vm-series-firewall-on-...

It sounds like what you want.

[OtakarKlier]

Hello,

Also there are free/inexpensive SIEM options of that helps as well.

Regards,