Hi all,
Trust you are well.
We have a Panorama VM on VMWare EXSI and is in Panorama mode 16 CPUs with 32 GB ram. We are currently using this for management and not all firewalls are sending the logs to panorama.
We now need to implement an external security product that makes API calls to panorams when there is a security incident to pull the threat log from Panorama.Firewalls will soon start to send threat logs to Panorama. .
There is some articles pasted below which will follow , what i would like tp know more about how to increasing the /opt/panlog ( assuming the threat logs are sotred there ) the size space with log rententiion and compression is that possible
https://live.paloaltonetworks.com/t5/blogs/log-retention/ba-p/306150#:~:text=If%20you%20have%20a%20virtual,entries%20in%20that%20specific%20log.


I dont think you can simply increase the size of panlogs, I think you'll need to replace the sdb disk with a new, larger, one in your hypervisor