Adding Panorama Log Servers
Hello -
Full disclosure, I don't know much about Pano's as log servers.
We have two panos in an active/passive set up. PanoA and PanoB. My company wants to bring in two more Pano's strictly as log servers. So PanoA and PanoALog, PanoB and PanoBLog.
What is the best way to go about this?
Thanks in advance for your time.
50 Views
The tricky part with log collectors is that you need to commit several times before they're properly added, but you can 1. Create the new collectors 2. Commit to panorama 3. Set up the collectors through CLI, point them to panorama 4. Commit on collectors 5. Push to devices from panorama to "attach" the collectors 6. Add them in collector group 7. Remove old devices from collector group 7. Commit to panorama 8. Push to devices This should convey to all firewalls and the new collectors where logs need to go from now on