Panorama option is not available under log forwarding profile. Cortex Data Lake option is checked
3105
Created On 12/17/22 22:09 PM - Last Modified 05/29/24 19:51 PM
Symptom
- Logs are still forwarded to Cortex as the configuration is enabled.
-
Verify the same with the below steps
login@PA-FW(active)> set cli config-output-format set login@PA-FW(active)> configure login@PA-FW(active)# show | match logging-service set deviceconfig setting logging logging-service-forwarding enable yes set deviceconfig setting logging logging-service-forwarding logging-service-regions europe set deviceconfig setting logging logging-service-forwarding enable-duplicate-logging no
Environment
- PAN-OS
- Firewall
- Panorama
Resolution
Run command from CLI configure mode
login@PA-FW(active)# delete deviceconfig setting logging logging-service-forwarding <<< Remove the config login@PA-FW(active)# show | match logging-service <<< Verify [edit] login@PA-FW(active)# commit <<< commit the changes
Additional Information
If the logs are required to be sent to Panorama along with Cortex Data Lake then enable "Enable Duplicate Logging" under Device > Set Up > Management > Logging Service