Setting up log collection in Panorama

[alan-griffiths]

Hi,

Very new to Palo, just doing a PoC in AWS at the moment.

I've got Panorama and 2 VM-100 firewalls deployed. Trying to get traffic logs from the firewalls into Panorama. I've used the two links below to configure it

https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-log-collection/log-collection-...

https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-log-collection/configure-log-f...

Everything appears to be setup as per the documentation. Rules are logging, I can see them in the firewall GUI, but no logs appear in the Panorama GUI.

Any suggestions on further debug?

[PavelK · Accepted solution]

Thank you for reply @alan-griffiths

from the provided log, I am unfortunately not able determine what the issue is and running out of ideas.

Last thing I would do is perform below steps:

In Panorama navigate to: Commit > Push to Device> Edit Selection > Deselect All for Device Groups and Templates > Collector Groups > select Collector Group and click OK and Push.

In Firewall restart log receiver process: debug software restart process log-receiver

Then check logs in Firewall to see there is any error: less mp-log logrcvr.log

Kind Regards

Pavel

[alan-griffiths]

After the restart of the logging process the connection status was reported as active, but I still wasn't seeing logs in Panorama. So I did a full restart of Panorama and now logs are showing!

Thanks for your assistance.