05-31-2021 05:37 PM
Can we know if the following is possible with Palo Alto?
1.Resize the Log drive on a functional Palo VM without losing all content
We’ve always had a secondary larger log drive when these were built – not big enough mind you.
i.e. an offline resize with something like GParted instead of deleting the existing log drive and recreating a bigger log drive.
2. Rebuild the Palo appliance without losing logging content
If an appliance is rebuilt, and an existing larger log drive is added, is it smart enough to see that drive as usable, rather than reformat&partition it as if a brand new blank disk?
06-01-2021 12:17 AM
Have you reviewed this article?
It sounds like what you want.
06-01-2021 11:25 AM
Also there are free/inexpensive SIEM options of that helps as well.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!