Collector Group warning message regarding preferences list
10308
Created On 07/26/19 03:01 AM - Last Modified 09/09/20 03:53 AM
Symptom
Warning message displayed if the firewall is not assigned to a collector group
Environment
- Panorama deployed as Virtual Appliance.
- PAN-OS 8.0 and above.
- Log Collector Group configured.
Resolution
Starting PAN-OS 8.0 and onwards, it is recommended to configure a local log collector on your VM Panorama running as Panorama mode and configure preferences list for the firewalls
You can setup Log Forwarding Preferences on your Collector group
- Go to Panorama > Collector Groups > Add > Collector Group > Device Log Forwarding > Add > Devices > Log Forwarding Preferences
- Under Devices > Modify. Select firewalls to be added
- Under Collectors > Add. Select the local configured collector
- Commit on the Panorama
Additional Information
- If you ignore the log-collector warning message, the Firewalls continue to send logs to Panorama using CMS channel but not the Log Collector channel
- You can verify this by using the show command listed below:
# show logging-status
> CMS 1
Sending to CMS 1
>Log Collector
Not Sending to Log Collector