Failed to migrate Panorama from Legacy mode to Management-Only mode.
6167
Created On 08/16/23 05:45 AM - Last Modified 08/22/23 17:40 PM
Symptom
- Trying to switch panorama from legacy mode to management-only mode.
- Error "cannot switch to management-only mode; all devices must be included in log-collector-group(s)" is seen.
admin@Panorama> request system system-mode management-only
Executing this command will change the system to management-only mode, logs will be removed. This will restart the system. Are you sure you want to continue? (y or n)
Server error : Failed to change to management-only mode.
cannot switch to management-only mode; all devices must be included in log-collector-group(s).
Environment
- PANOS: 11.0
- Panorama
Cause
- The Panorama is not connected to any log collector.
- By default, we don't have an additional 2TB logging disk to configure the log collector in legacy mode.
- The Panorama virtual appliance in Legacy mode uses approximately 11GB on its internal disk partition for log storage. Refer to the Admin Guide
Resolution
- Create a dummy Log Collector under GUI: Panorama > Managed Collectors with a dummy serial no. eg. 123456789
Note: Serial no. cannot be the same as the actual panorama serial No.
- From WebUI navigate to Panorama > Collector Groups, and configure a dummy Log Collector Group named 'Test-CG'.
- Commit and Push (But this Push has to be done only to the collector group).
- From the CLI, run the command "request log-migration-set-start". This allowed adding a collector without disks to the collector group.
- From the CLI, run the below commands:
> configure
# set log-collector-group Test-CG logfwd-setting collectors <collector-name>
# commit force
# exit
- From the WebUI, Again navigate to Panorama > Collector Groups > Test-CG > Device Log Forwarding > Add, then Modify the 'Devices' section to include all the managed devices.
- Commit the changes locally on the Panorama.
- Afterwards, Change the Panorama system mode to management-only using the CLI command "request system system-mode management-only"
- Once the Panorama boots up in management-only mode, delete the dummy Log Collector Group and Log Collector.