: Configure Storage Quotas and Expiration Periods for Logs and Reports
Focus
Focus

Configure Storage Quotas and Expiration Periods for Logs and Reports

Table of Contents

Configure Storage Quotas and Expiration Periods for Logs and Reports

  1. Configure the storage quotas and expiration periods for:
    • Logs of all types that a Panorama virtual appliance in Legacy mode receives from firewalls.
    • App Stats logs that Panorama receives from firewalls.
    • System and Config logs that Panorama and Log Collectors generate locally.
    The Panorama management server stores these logs locally.
    If you reduce a storage quota such that the current logs exceed it, after you commit the change, Panorama removes the oldest logs to fit the quota.
    1. Select
      Panorama
      Setup
      Management
      and edit the Logging and Reporting Settings.
    2. In the
      Log Storage
      settings, enter the storage
      Quota (%)
      for each log type.
      When you change a percentage value, the page refreshes to display the corresponding absolute value (Quota GB/MB column) based on the total allotted storage on Panorama.
    3. Enter the
      Max Days
      (expiration period) for each log type (range is 1 to 2,000).
      By default, the fields are blank, which means the logs never expire.
      Restore Defaults
      if you want to reset the quotas and expiration periods to the factory defaults.
  2. Configure the expiration period for reports that Panorama generates.
    1. Select
      Log Export and Reporting
      and enter the
      Report Expiration Period
      in days (range is 1 to 2,000).
      By default, the field is blank, which means reports never expire.
    2. Click
      OK
      to save your changes.
  3. Configure the storage quotas and expiration periods for logs of all types (except App Stats logs) that M-600, M-500, M-200, M-100 appliances, or Panorama virtual appliance in Panorama mode receives from firewalls.
    The local or Dedicated Log Collectors store these logs.
    You configure these storage quotas at the Collector Group level, not for individual Log Collectors.
    1. Select
      Panorama
      Collector Groups
      and edit the Collector Group.
    2. In the
      General
      settings, click the
      Log Storage
      value.
      A value doesn’t display unless you assigned Log Collectors to the Collector Group. If the field displays 0MB after you assign Log Collectors, verify that you enable the disk pairs when you Configure a Managed Collector and that you committed the changes (
      Panorama
      Managed Collectors
      Disks
      ).
    3. Enter the storage
      Quota(%)
      for each log type.
      When you change a percentage value, the page refreshes to display the corresponding absolute value (Quota GB/MB column) based on the total storage allotted to the Collector Group.
    4. Enter the
      Max Days
      (expiration period) for each log type (range is 1 to 2,000).
      By default, the fields are blank, which means the logs never expire.
      Restore Defaults
      if you want to reset the quotas and expiration periods to the factory defaults.
    5. Click
      OK
      to save your changes.
  4. Commit the changes to Panorama and push the changes to the Collector Group.
    1. Select
      Commit
      Commit and Push
      and
      Edit Selections
      in the Push Scope.
    2. Select
      Collector Groups
      , select the Collector Group you modified, and click
      OK
      .
    3. Commit and Push
      your changes.
  5. Verify that Panorama applied the storage quota changes.
    1. Select
      Panorama
      Setup
      Management
      and, in the Logging and Reporting Settings, verify that the
      Log Storage
      values are correct for the logs that the Panorama management server stores.
    2. Select
      Panorama
      Collector Groups
      , select the Collector Group you modified, and verify that the
      Log Storage
      values in the
      General
      tab are correct for the logs that the Log Collectors store.
      You can also verify the Collector Group storage quotas by logging in to a Log Collector CLI and entering the operational command
      show log-diskquota-pct
      .

Recommended For You