End-of-Life (EoL)
In a distributed log collection deployment, where you have Dedicated Log Collectors, if you need a firewall to send logs to Panorama instead of sending logs to the Collector Group, you must remove the firewall from the Collector group.
When you remove the firewall from the Collector Group and commit the change, the firewall will automatically send logs to Panorama instead of sending them to a Log Collector.
To temporarily remove the log forwarding preference list on the firewall, you can delete it using the CLI on the firewall. You must however, remove the assigned firewalls in the Collector Group configuration on Panorama. Otherwise, the next time you commit changes to the Collector Group, the firewall will be reconfigured to send logs to the assigned Log Collector.
Remove a Firewall from a Collector Group
Select Panorama > Collector Groups and select the Collector Group.
Select Log Forwarding and, in the Log Forwarding Preferences section, select the firewall to remove from the group, click Delete, and click OK.
Click Commit, for the Commit Type select Panorama, and click Commit again.
Click Commit, for the Commit Type select Collector Group, select the Collector Group from which you removed the firewall, and click Commit again.

Recommended For You