06-12-2026 03:15 AM
Hello Community,
We are experiencing an issue with GlobalProtect log retention on Panorama.
Our Panorama manages 6 firewalls, and all firewalls are configured to forward logs to Panorama.
However, on Panorama, the GlobalProtect logs for the managed firewalls are only retained for about 6 days. When we check the output of the command show system logdb-quota, the Detailed Log Current Retention shows 16 days.
For Traffic logs, the Detailed Log Current Retention also shows 16 days, and Panorama retains approximately 16 days of Traffic logs as expected.
Based on the retention information reported by the command, we would expect the GlobalProtect logs to also be retained for around 16 days. However, they are only available for about 6 days.
Has anyone experienced a similar issue? Could you please advise how we should troubleshoot and resolve this issue?
Thank you.
06-16-2026 06:16 AM - edited 06-16-2026 06:17 AM
the logdb quota is for the local system disk, it does not represent the log collector
you can see the allocated % in the log collector group "General" settings, via the configuration file or in CLI:
> set cli config-output-format set
> configure
# show | match 'general-setting management quota-settings disk-quota'
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
