Critical Panorama Alarm - Minimum Retention Period (days) Violated for Segment
Resolution
Symptom
The Panorama system logs shows the following critical error (lower log message):
Cause
In Panorama > Collector Groups, there is a configurable field called 'Min. Retention Period (days)' under the General tab. This minimum retention period field instructs Panorama to store collected log files for the entered number of days.
If the log collector is not able to keep logs for the minimum period specified, then the status is entered into the system logs. When the situation clears, another system log entry is generated, indicating the OK status. See the upper message in the image below:
Resolution
In order to lower/prevent the occurrences of the retention period violation messages in the logs, the minimum retention period can be set to a lower number in the Collector Group configuration.
owner: mbutt