Configure Storage Quotas and Expiration Periods for Logs and Reports

1. Configure the storage quotas and expiration periods for:
   • Logs of all types that a Panorama virtual appliance in Legacy mode receives from firewalls.
   • App Stats logs that Panorama receives from firewalls.
   • System and Config logs that Panorama and Log Collectors generate locally.

   The Panorama management server stores these logs locally.

   If you reduce a storage quota such that the current logs exceed it, after you commit the change, Panorama removes the oldest logs to fit the quota.
   1. Select PanoramaSetupManagement and edit the Logging and Reporting Settings.
   2. In the Log Storage settings, enter the storage Quota (%) for each log type.
      When you change a percentage value, the page refreshes to display the corresponding absolute value (Quota GB/MB column) based on the total allotted storage on Panorama.
   3. Enter the Max Days (expiration period) for each log type (range is 1 to 2,000).
      By default, the fields are blank, which means the logs never expire.

      Restore Defaults if you want to reset the quotas and expiration periods to the factory defaults.
2. Configure the expiration period for reports that Panorama generates.
   1. Select Log Export and Reporting and enter the Report Expiration Period in days (range is 1 to 2,000).
      By default, the field is blank, which means reports never expire.
   2. Click OK to save your changes.
3. Configure the storage quotas and expiration periods for logs of all types (except App Stats logs) that M-600, M-500, M-200 appliances, or Panorama virtual appliance in Panorama mode receives from firewalls.
   The local or Dedicated Log Collectors store these logs.

   You configure these storage quotas at the Collector Group level, not for individual Log Collectors.
   1. Select PanoramaCollector Groups and edit the Collector Group.
   2. In the General settings, click the Log Storage value.
      A value doesn’t display unless you assigned Log Collectors to the Collector Group. If the field displays 0MB after you assign Log Collectors, verify that you enable the disk pairs when you Configure a Managed Collector and that you committed the changes (PanoramaManaged CollectorsDisks).
   3. Enter the storage Quota(%) for each log type.
      When you change a percentage value, the page refreshes to display the corresponding absolute value (Quota GB/MB column) based on the total storage allotted to the Collector Group.
   4. Enter the Max Days (expiration period) for each log type (range is 1 to 2,000).
      By default, the fields are blank, which means the logs never expire.

      Restore Defaults if you want to reset the quotas and expiration periods to the factory defaults.
   5. Click OK to save your changes.
4. Commit the changes to Panorama and push the changes to the Collector Group.
   1. Select CommitCommit and Push and Edit Selections in the Push Scope.
   2. Select Collector Groups, select the Collector Group you modified, and click OK.
   3. Commit and Push your changes.
5. Verify that Panorama applied the storage quota changes.
   1. Select PanoramaSetupManagement and, in the Logging and Reporting Settings, verify that the Log Storage values are correct for the logs that the Panorama management server stores.
   2. Select PanoramaCollector Groups, select the Collector Group you modified, and verify that the Log Storage values in the General tab are correct for the logs that the Log Collectors store.
      You can also verify the Collector Group storage quotas by logging in to a Log Collector CLI and entering the operational command show log-diskquota-pct.