Perform Initial Configuration of the Panorama Virtual Appliance, it will have one disk partition for all data in which approximately 11GB is allocated for log storage. Increasing the disk size doesn’t increase the log storage capacity. If you need up to 8TB of log storage, you can add a virtual disk to Panorama installed on a VMware ESXi server or in VMware vCloud Air. If you need more than 8TB, you can mount Panorama to an NFS datastore but only on the ESXi server, not in vCloud Air. For additional log storage, you can also forward firewall logs to Dedicated Log Collectors (see
Configure a Managed Collector) or
Configure Log Forwarding from Panorama to External Destinations.
Panorama can use only one virtual disk for logging. Therefore, if you add a virtual disk that is dedicated for logging, Panorama stops using the default 11GB log storage on the original disk and copies any existing logs to the new disk. (Panorama continues using the original disk for data other than logs.) Expanding the log storage capacity of an existing logging disk is not supported, and Panorama does not recognize the additional storage capacity. For example if you added a 2TB logging disk, and later expand that existing logging disk to 4TB, Panorama continues to recognize the logging disk as having 2TB of storage capacity and ignores the additional 2TB of storage capacity. If you replace an existing dedicated logging disk of up to 2TB storage capacity with a disk of up to 8TB, you will lose the logs on the existing disk. To preserve the logs, your choices are:
Before expanding log storage capacity,
Determine Panorama Log Storage Requirements.
To expand log storage capacity beyond the approximately 11GB internal storage allocated by default on the Panorama virtual appliance, you can add another virtual disk. Panorama running on ESXi 5.5 and later versions supports a virtual disk of up to 8TB. Panorama running on earlier ESXi versions supports a virtual disk of up to 2TB.
When the Panorama virtual appliance runs on an ESXi server, mounting to a Network File System (NFS) datastore enables logging to a centralized location and expanding the log storage capacity beyond what a virtual disk supports. (ESXi 5.5 and later versions can support a virtual disk of up to 8TB. Earlier ESXi versions support a virtual disk of up to 2TB.) Before setting up an NFS datastore in a Panorama high availability (HA) configuration, see
Logging Considerations in Panorama HA.