Panorama Disk and logs confusion

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Panorama Disk and logs confusion

L4 Transporter

I don't know where the logs are going as they do not show up in Panorama GUI for more than 10 days.

------------------------------------

Panorama has 2TB disk on top of 81G, and that is considerable amount of storage.

image.png

Log storage only shows 13G available of which 10G is actually used. And this results in about 10 days of logs in GUI

 

image.png

 

image.png

 

-----------------------

show system disk-space

Filesystem Size Used Avail Use% Mounted on
/dev/root 7.9G 4.9G 2.6G 67% /
none 16G 100K 16G 1% /dev
/dev/sda5 24G 16G 7.3G 68% /opt/pancfg
/dev/sda6 5.9G 3.9G 1.7G 70% /opt/panrepo
tmpfs 16G 3.5G 13G 22% /dev/shm
cgroup_root 16G 0 16G 0% /cgroup
/dev/sda8 32G 12G 19G 37% /opt/panlogs
/dev/loop0 9.8G 23M 9.2G 1% /opt/logbuffer
/dev/sdb1 1.7T 1.4T 295G 83% /opt/panlogs/ld1
tmpfs 12M 28K 12M 1% /opt/pancfg/mgmt/ssl/private
tmpfs 32M 0 32M 0% /mnt/pantmp

 

--------------------------

show system logdb-quota

Quotas:
system: 20.00%, 2.681 GB Expiration-period: 0 days
config: 25.00%, 3.351 GB Expiration-period: 0 days
hip-reports: 1.00%, 0.134 GB Expiration-period: 0 days
appstat: 30.00%, 4.021 GB Expiration-period: 0 days

Disk usage:
system: Logs and Indexes: 2.7GB Current Retention: 50 days
config: Logs and Indexes: 1.7GB Current Retention: 736 days
appstatdb: Logs and Indexes: 4.0GB Current Retention: 178 days
hip-reports: Logs and Indexes: 0 Current Retention: 0 days

Slot:0
Quotas:
detailed: 60.00%, 282 GB Expiration-period: 0 days
summary: 30.00%, 141 GB Expiration-period: 0 days
infra_audit: 5.00%, 24 GB Expiration-period: 0 days
platform: 0.10%, 0 GB Expiration-period: 0 days
external: 0.10%, 0 GB Expiration-period: 0 days

Disk usage:
detailed: Logs: 273585 MB, Current Retention: 8 days
summary: Logs: 136741 MB, Current Retention: 20 days
infra_audit: Logs: 22806 MB, Current Retention: 133 days
platform: Logs: 0 MB, Current Retention: 0 days
external: Logs: 0 MB, Current Retention: 0 days

Space reserved for cores: 0MB

1 REPLY 1

L4 Transporter

Hello @raji_toor :

 

The section Logging and reporting its about local log space ( local PANORAMA PAN-OS and Log space ) the Collector Groups is the storage for the log of the firewalls.

 

Check this links:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMTXCA4

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-log-collection/configure-log-forwarding-to-panorama 

 

Best Regards

High Sticker
  • 2450 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!