logging and device groups

[AnupamGaur_Nomios]

Hello ,

I have a firewall and i integrated it with Panorama .

However , i only make use of templates in Panorama , so no device groups .

My Panorama is in Panorama mode and i did all the necessary config to enable the firewall to send logs to Panorama 

but logs were not appearing . The moment i created a dummy device group and attached my firewall  ,logs started appearing

I have two questions :

1) is Having a device group in Panorama Mandatory  for logs to be appearing on Panorama Monitor

2) Can Panorama Management-only mode not at all show any log from firewall and having Panorama in Panorama mode mandatory for logging on Panorama .?

[TomYoung]

Hi @AnupamGaur_Nomios ,

Great questions!  Here are my answers:

1. I have seen the same thing.  Logs would not show up until I configured a device group.  I cannot find any documentation that explicitly states device groups are required for logging.
2. Yes.  "Management Only mode allows the Panorama virtual appliance to operate strictly as a Panorama management server without local log collection capabilities."  https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-v...

Thanks,

Tom