If you use a Panorama virtual appliance in
Legacy mode to manage Dedicated Log Collectors, you have the option
to forward firewall logs to Panorama instead of forwarding to the
Log Collectors. For such cases, you must remove the firewall from
the Collector Group; the firewall will then automatically forward
its logs to Panorama.
To temporarily remove the log
forwarding preference list on the firewall, you can delete it using the
CLI on the firewall. You must however, remove the assigned firewalls
in the Collector Group configuration on Panorama. Otherwise, the
next time you push changes to the Collector Group, the firewall
will be reconfigured to send logs to the assigned Log Collector.
Select
Panorama
Collector Groups
and edit the
Collector Group.
Select
Device Log Forwarding
,
click the firewall in the Devices list,
Modify
the
Devices list, clear the check box of the firewall, and click
OK
three
times.
Select
Commit
Commit
and Push
and then
Commit and
Push
your changes to Panorama and the Collector Group
from which you removed the firewall.
