How to change the IP address of Log Collector - Knowledge Base - Palo Alto Networks

How to change the IP address of Log Collector

9311

Created On 04/10/23 03:52 AM - Last Modified 05/10/23 04:24 AM

Log Collector

10.0

10.2

10.1

11.0

Panorama

Objective

Prevent the issue encountered under KB: Log Collector showing 'Out of Sync' due to "IP mismatch for mgmt interface"
Change the IP address of Log Collector

To save and Commit, click OK > OK, then Commit to Panorama and Push to Devices
To Commit, Click on Commit > Commit to Panorama > Commit
To send the config from Panorama to the Log Collector, Click on Commit > Push to Devices > Edit Selections > Collector Group > check the appropriate CG > OK > Push
As a result of the changes implemented earlier, we've identified an expected error related to an "Out of Sync" issue. The cause of this issue is that the Log Collector is still utilizing the previous IP address (10.46.33.127) to connect to Panorama instead of the updated one (10.46.33.7).

SSH to the Log Collector using the new IP address (10.46.33.7). You'll notice below that it still maintains the old TCP connection using its former IP address (10.46.33.127)

admin@Log_Collector> show netstat numeric yes | match 10.46.48.23
tcp        0  31382 10.46.33.127:45355      10.46.48.23:3978        ESTABLISHED

To make the Log Collector use its new management IP address, enter the following command. Please note that running this command will disconnect your SSH session.

admin@Log_Collector> debug software restart process management-server

After executing the previous command, log back into the Log Collector to confirm that it has established the desired connection with Panorama.

admin@Log_Collector> show netstat numeric yes | match 10.46.48.23
tcp        0      0 10.46.33.7:42281        10.46.48.23:3978        ESTABLISHED

If the output is the same as the one shown below, it confirms that we have successfully achieved our goal.

PAN-OS Software Updates