Configuring log collectors and log collector groups

To ensure that logs can be stored for an extended period of time, as you may need to comply with certain standards that require lengthy log storage (regulations such as SOX and HIPAA and standards such as ISO 27001 require several years' worth of logs to be stored), exporting them from the firewall and into a dedicated log management system is required.

You can create additional log collectors by setting up (and licensing) a second (to create a high availability cluster) Panorama Virtual Machine (VM) in Panorama mode, or add M (physical) appliances of panorama and configure them in logger mode.

You can do so from the CLI of the device you want to set to logger mode by executing the following command:

> request system system-mode logger

In Panorama, you can add multiple log collectors in Panorama | Managed Collectors and then add them to one or more groups in Panorama | Collector Groups.

To improve availability...