Hi. After a recent failure HD on my normally active firewall, it appears I'm going to lose close on 12 months of logs because Palo Alto has no defined process to get the logs off a failed hard drive (where the log partition is still accessible) onto the replaced drive. Yes, I have tried scp log export/import - I've swapped the old HD in and gotten it to the point I can get an export, but I can't re-import it. Anyway, that's not the point of this. My boss wanted an alternate solution to keeping the logs on the device, so as to avoid this in future - Panorama of course came up, but the pricing for it is *completely* ridiculous, so it's out of the question. Does anyone have suggestions to an alternate, external log collection point which can give me meaningful data/reports? I don't mind if it costs a bit - but my boss baulked at the much higher amount we were quoted for the VM version of Panorama, so I'd like to keep the costs down to maybe $2-3k if I can. I've heard Splunk mentioned, but a quick perusal looks like it's *way* overkill for what I want. Anyone else got a solution/suggestion? Cheers.
... View more
