cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

Cyber Elite
Cyber Elite

Thank you for quick reply @rajendra-kumar 

 

All disks will be used and logs will be distributed among all of them.

 

Regarding data on faulty disk, I can only speak for my own experience when I lost one of the log collectors (Enable log redundancy across collectors was not enabled). I could still search data that resided on other log collector, but not on faulty one. Since I was not aware what logs were located on the log collector that was not online at that time depending on the log I queried I was getting incomplete log search. I assume the same will happen if you lose a single disk. You will not be able to get logs from faulty disk.

 

Regarding what you mentioned with single log collector in log collector group, it seems like you did not configure local log collector on your Panorama passive node. Could you please make sure you added local log collector (The link is for M-100, but concept is the same): https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMTXCA4 Then you should be able to add additional log collector to existing log collector group from: Panorama > Collector Groups > [Log Collector Group Name] > Add. After this step the option: "Enable log redundancy across collectors" will work.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

View solution in original post

Who rated this post