How to Determine Log Rate on Panorama Devices with a Log Collector

How to Determine Log Rate on Panorama Devices with a Log Collector

121425
Created On 09/25/18 19:24 PM - Last Modified 11/15/23 18:05 PM


Objective


This document describes how to determine the logging rate on Panorama with a Log Collector.

Environment


  • PAN-OS 7.0 and above.
  • Any Panorama.


Procedure


When a Panorama Virtual Machine or M Series is configured in Panorama Mode with a Log Collector and is managing firewalls, the logging rate can be obtained using the Statistics link.

  1. From the WebUI: Panorama > Managed Collectors

Managed Collectors

  1. Click on Statistics display Average Logs/sec.

Collector Statistics

  1. When the Panorama server is enabled to collect logs, the same statistics can be obtained from the CLI, using the command:
Panorama> debug log-collector log-collection-stats show incoming-logs
Last time logs received Sun Feb  2 17:54:47 2020

Incoming log rate =   125.85

Detail counts by logtype:
traffic:1780676451
config:1126
system:98615
threat:28105597

Note: The difference in the log rate between the command Line and Web UI is because:

  • The Web UI displays the rate at which the logs are written to the M-100 RAID disks and is measured at 5 minute average intervals.
  • The command line displays the rate at which the Log Collector has received the logs at any moment in time.


Additional Information


Panorama Administrator's Guide describes how to Determine Panorama Log Storage Requirements.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXbCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language