Thank you for reply @Metgatz
could you confirm in Panorama that Firewalls are sending System/Configuration logs?
Could you login to log collector, then issue: show logging-status device <Serial Number of one of the Firewall>
In the bottom part of the output, there should be entry for config and system logs with "Last Log Rcvd". If you see that logs are coming in, then the issue is within Panorama.
Could you also confirm that under: Collector Group > General > Log Storage > Log Storage Settings > Infrastructure and Audit Logs, there is allocated quota?
Kind Regards
Pavel
Help the community: Like helpful comments and mark solutions.
