Move a Log Collector to a Different Collector Group

Remove the Log Collector from Panorama management.
Select
Panorama
Collector Groups
and edit the Collector Group that contains the Log Collector you will move.
In the Collector Group Members list, select and
Delete
the Log Collector.
Select
Device Log Forwarding
and, in the Log Forwarding Preferences list, perform the following steps for each set of firewalls assigned to the Log Collector you will move:
In the Devices column, click the link for the firewalls assigned to the Log Collector.
In the Collectors column, select and
Delete
the Log Collector.
To reassign the firewalls,
Add
the new Log Collector to which they will forward logs.
Click
OK
twice to save your changes.
Select
Panorama
Managed Collectors
and then select and
Delete
the Log Collector you will move.
Configure a Collector Group.
Add the Log Collector to its new Collector Group and assign firewalls to the Log Collector.
When you push changes to the Collector Group configuration, Panorama starts redistributing logs across the Log Collectors. This process can take hours for each terabyte of logs. During the redistribution process, the maximum logging rate is reduced. In the
Panorama
Collector Groups
page, the Log Redistribution State column indicates the completion status of the process as a percentage.
Configure Log Forwarding to Panorama for the new Collector Group you configured.
Select
Commit
Commit and Push
to commit your changes to Panorama and push the changes to device groups, templates, and Collector Groups if you have not already done so.