Log and Report Storage

• Panorama virtual appliance in Panorama mode—The storage space for reports is 200MB. The appliance uses its virtual system disk to store the System and Config logs that Panorama and Log Collectors generate. The virtual system disk also stores the Application Statistics (App Stats) logs that Panorama automatically receives at 15-minute intervals from all managed firewalls. Panorama stores all other log types to its virtual logging disks (1 to 12).
• Panorama virtual appliance in Management Only mode—The storage space for reports is 500MB. The appliance uses its virtual system disk to store the System and Config logs that Panorama and Log Collectors generate. The virtual system disk also stores the Application Statistics (App Stats) logs that Panorama automatically receives at 15-minute intervals from all managed firewalls. You must Configure a Managed Collector to forward logs from managed firewalls as Panorama in Management Only mode cannot store any other log type.
• Panorama virtual appliance in Legacy mode—The storage space for reports is 200MB for Panorama 8.0 or earlier releases and 500MB for Panorama 8.0.1 and later releases. Panorama writes all logs to its assigned storage space, which can be any of one the following:
  • Virtual system disk—By default, approximately 11GB is allocated for log storage on the virtual system disk that you created when installing Panorama. If you add a virtual logging disk or NFS partition, Panorama still uses the system disk to store the System and Config logs that Panorama and Log Collectors generate and to store the App Stats logs collected from firewalls.
  • Dedicated virtual logging disk—Stores all log types except those that reside on the system disk.
  • NFS partition—This option is available only to Panorama running on a VMware ESXi server. The NFS partition stores all log types except those that reside on the system disk.
• M-700, M-600, M-500, M-300, or M-200 appliance—The storage space for reports is 500MB for Panorama 6.1 or later releases and 200MB for earlier releases. The M-Series appliances use their internal SSD to store the Config logs and System logs that Panorama and Log Collectors generate and to store the App Stats logs collected from firewalls. Panorama saves all other log types to its RAID-enabled disks. The RAID disks are either local to the M-Series appliance in Panorama mode or are in a Dedicated Log Collector (M-Series appliance in Log Collector mode). You edit the log storage quotas on the RAID disks when you Configure a Collector Group.
  For details on the log storage options and capacities, see Panorama Models. You can Expand Log Storage Capacity on the Panorama Virtual Appliance by adding virtual logging disks or NFS storage. You can Increase Storage on the M-Series Appliance by adding RAID drives or by upgrading from 1TB drives to 2TB drives.