>
    Configure Log Storage Quotas and Expiration Periods
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. Monitoring
    4. View and Manage Logs
    5. Configure Log Storage Quotas and Expiration Periods
    Download PDF

    Configure Log Storage Quotas and Expiration Periods

    Table of Contents
    End-of-Life (EoL)

    Configure Log Storage Quotas and Expiration Periods

    The firewall automatically deletes logs that exceed the expiration period. When the firewall reaches the storage quota for a log type, it automatically deletes older logs of that type to create space even if you don’t set an expiration period.
    If you want to manually delete logs, select DeviceLog Settings and, in the Manage Logs section, click the links to clear logs by type.
    1. Select DeviceSetupManagement and edit the Logging and Reporting Settings.
    2. Select Log Storage and enter a Quota (%) for each log type. When you change a percentage value, the dialog refreshes to display the corresponding absolute value (Quota GB/MB column).
    3. Enter the Max Days (expiration period) for each log type (range is 1-2,000). The fields are blank by default, which means the logs never expire.
      The firewall synchronizes expiration periods across high availability (HA) pairs. Because only the active HA peer generates logs, the passive peer has no logs to delete unless failover occurs and it starts generating logs.
    4. Click OK and Commit.

    © 2025 Palo Alto Networks, Inc. All rights reserved.