To sort the logs manually by tenant in Panorama,
associated with that
tenant to display the logs for that device group. However, if you are
forwarding your logs to an external device, you might have a need
to sort those logs at the tenant level. To do so, find the device
group ID in the logs that is associated with the device group and
use that group ID-to-device group mapping to associate the logs
with a tenant.
There are four fields associated with the device
group in the logs:
DG Hierarchy Level 1
Hierarchy Level 2
DG Hierarchy Level 3
DG Hierarchy Level 4
. These fields show
the device group IDs in its hierarchy. The shared device group (level
0) is not included in this structure.
refers to the first device group level in the
hierarchy. If you added children or grandchildren device groups,
DG Hierarchy Level 2
Hierarchy Level 4
fields show the hierarchy from the
child group to the great-grandchild group, respectively.
logs by tenant, complete the following task.
the device group IDs associated with the device group.
To find this information using a CLI command, log
into Panorama as a superuser (admin-level user), enter the
in configuration mode, and view the values in the
The IDs for the device groups display under the device group name.
The following example shows that the device ID for the
Note that these device
groups are at the first level in the hierarchy (
); you use that information in the query in the
admin# show readonly
To use an API query, enter the following API command:
Use the device group ID-to-device group name mapping
to associate the logs with a tenant.
The following example shows an administrator retrieving
the logs for Acme using the Log Forwarding App to
create a Syslog Forwarding Profile.
Since the mapping example in Step 1 retrieves
the device group-to-device ID of 20 for Acme and the hierarchy is
at Level 1, you use that in the query, along with the following
IP address (you
can also specify an FQDN).
on which the server is listening.
default port for Syslog messages over TLS is 6514.
selected from the drop-down.
that select the logs you want to forward.
The following example shows the administrator creating
log using a
that selects the logs for Acme,
based on the hierarchy level (
DG Hierarchy Level 1
and the device group (20) you retrieved in Step 1.