03-30-2022 03:49 PM - edited 03-30-2022 04:20 PM
Thank you for the post @BabajideM
could you check below points:
1.) Make sure that Log Collector's serial number and password in Panorama under Managed Log Collectors are correct.
2.) Make sure that PAN-OS of Log Collector is the same or lower than the one running on Panorama.
3.) I would also make sure that log collector is configured to use the same time zone as Panorama and that DNS server is configured:
set deviceconfig system timezone <Time Zone>
set deviceconfig system dns-setting servers primary <IP address> secondary <IP address>
4.) Make sure log collector is added to log collector group and push the configuration to log collector group by: Commit > Push to Devices > Collector Groups > [Log Collector name].
5.) Make sure that App content version installed on Log Collector is the same as the one on Panorama.
6.) On Panorama side, I would check the output from: show netstat numeric yes | match 3978
Could you also take packet capture on Panorama side? You can use Log Collector's IP address as a filter. Make sure that TCP 3978 between Panorama and Log Collector are open.
Kind Regards
Pavel
