10-10-2012 08:13 AM
Hello,
This is not very clear on Palo box, since months we have issue that every
week we have alarm indicating that the log was exceeded 80 of the quota, in
fact we want to log all traffics and don’t want to disable logging on some
rules, I monitored during the week the logdb-quota and Palo don’t clear/purge
or delete older log at 80%, we opened a case on Palo support from three weeks
and the only response we get is that we have to disable some logging on our
rules.
So will be grate that Palo clarify this issue and response the question
below:
•Is Palo box purge/clear or delete older logs or it
overwrite older logs ?
•If it purge/clear
or delete, how many volume or % ?
•If it purge/clear
or delete, we should find a log entry on the system log and what is the exact event for that?
•Is there a specific time that Palo box do this or it do
it as soon as 80% was reached ?
•Is there a way to configure Palo box to clear or
deleted older logs from specific time ? if not way ( this is basic
configuration of system that have to be available)
•How can we sort out this issue? Without disabling logging
on some rules?
Thanks for your answer and help
