Focus

PAN-OS Web Interface Help

General Log Collector Settings

Table of Contents

General Log Collector Settings

Panorama > Managed Collectors > General

Configure the settings as described in the following table to identify a Log Collector and define its connections to the Panorama management server, DNS servers, and NTP servers.

Log Collector General Settings	Description
Collector S/N	(`Required`) Enter the serial number of the Panorama appliance that functions as the Log Collector. If the Log Collector is local, enter the serial number of the Panorama management server.
Collector Name	Enter a name to identify this Log Collector (up to 31 characters). The name is case-sensitive, must be unique, and can contain only letters, numbers, spaces, hyphens, and underscores. This name displays as the Log Collector hostname.
Inbound Certificate for Secure Syslog	Select the certificate that the managed collector must use to securely ingest logs from the Traps™ ESM server. This certificate is called an inbound certificate because the Panorama/ Managed Collector is the server to which the Traps ESM (client) is sending logs; the certificate is required if the Transport protocol for the log ingestion profile is SSL.
Certificate for Secure Syslog	Select a certificate for secure forwarding of syslogs to an external Syslog server. The certificate must have the Certificate for Secure Syslog option selected (see Manage Firewall and Panorama Certificates). When you assign a Syslog server profile to the Collector Group that includes this Log Collector (see Panorama > Collector Groups, PanoramaCollector GroupsCollector Log Forwarding), the Transport protocol of the server profile must be SSL (see Device > Server Profiles > Syslog).
Panorama Server IP	Specify the IP address of the Panorama management server that manages this Log Collector.
Panorama Server IP 2	Specify the IP address of the secondary peer if the Panorama management server is deployed in a high availability (HA) configuration.
Domain	Enter the domain name of the Log Collector.
Primary DNS Server	Enter the IP address of the primary DNS server. The Log Collector uses this server for DNS queries (for example, to find the Panorama management server).
Secondary DNS Server	(`Optional`) Enter the IP address a secondary DNS server to use if the primary server is unavailable.
Primary NTP Server	Enter the IP address or host name of the primary NTP server, if any. If you do not use NTP servers, you can set the Log Collector time manually.
Secondary NTP Server	(`Optional`) Enter the IP address or host name of secondary NTP servers to use if the primary server is unavailable.
Timezone	Select the time zone of the Log Collector.
Latitude	Enter the latitude (-90.0 to 90.0) of the Log Collector. Traffic and threat maps use the latitude for App Scope.
Longitude	Enter the longitude (-180.0 to 180.0) of the Log Collector. Traffic and threat maps use the longitude for App Scope.

Log Collector Configuration

Log Collector Authentication Settings