Cortex Data Lake logging service

With Logging Service, currently called Cortex Data Lake (CDL), logs are no longer sent to Panorama or a collector group, but instead go up into the cloud through a secure connection. This is a licensed feature, so every firewall that should log to the cloud will need to be outfitted with a license. Once the licensing is in order and Data Lake is properly set up at https://apps.paloaltonetworks.com/marketplace/cortex_data_lake, you can configure each firewall locally or through a Panorama template.

From Device | Setup | Management | Logging Service, you can select Enable Logging Service. PA-5200 and PA-7000 can have multiple (up to 20) simultaneous connections to Cortex Data Lake (and log collectors). This is achieved by enabling High Speed Log Forwarding from Device | Setup | Logging and Reporting Settings. One important caveat is that when High Speed Log Forwarding is enabled, all local log storage is disabled so logs will only be visible from...