60
208 • Panorama 7.0 Administrator’s Guide
© Palo Alto Networks, Inc.
Manage Storage Quotas and Expiration Periods for Logs and Reports
Administer Panorama
Each summary log type—Panorama evaluates logs after the various summary periods (hourly, daily, and
weekly), and deletes logs that exceed the configured expiration period.
Configure Storage Quotas and Expiration Periods for Logs and Reports
Weekly summary logs that fall short of the expiration threshold when log deletion occurs could
age past the threshold before the next log deletion. For example, if you configure Traffic Summary
logs to expire after 20 days and a weekly Traffic Summary log is 19 days old when the device
deletes expired logs, the device doesn't delete that log. The next time the device checks for
weekly logs to delete, 7 days later, that log will be 26 days old.
Panorama synchronizes expiration periods across high availability (HA) pairs. Because only the
active HA peer generates logs, the passive peer has no logs or reports to delete unless failover
occurs and it starts generating logs.
Even if you don’t set expiration periods, when a log quota reaches the maximum size, Panorama
starts overwriting the oldest log entries with the new log entries.
Configure Storage Quotas and Expiration Periods for Logs and Reports
Step 1 Configure the storage quotas and
expiration periods for:
• Logs of all types that a Panorama
virtual appliance receives from
firewalls.
• App Stats logs that Panorama (a virtual
appliance or M‐Series appliance)
receives from firewalls.
• System and Config logs that
Panorama (a virtual appliance or
M‐Series appliance) and its Log
Collectors generate locally.
The Panorama management server
stores these logs.
If you reduce a storage quota
such that the current logs exceed
it, after you commit the change,
Panorama removes the oldest
logs to fit the quota.
1. Select Panorama > Setup > Management and edit the Logging
and Reporting Settings.
2. In the Log Storage tab, enter the storage Quota (%) for each
log type. When you change a percentage value, the page
refreshes to display the corresponding absolute value (Quota
GB/MB column) based on the total allotted storage on
Panorama.
3. Enter the Max Days (expiration period) for each log type
(range is 1‐2,000). By default, the fields are blank, which
means the logs never expire.
To reset the quotas and expiration periods to the
factory defaults, click Restore Quota Defaults at the
bottom right of the dialog.
Step 2 Configure the expiration period for
reports that Panorama (a virtual
appliance or M‐Series appliance)
generates.
1. Select the Log Export and Reporting tab.
2. Enter the Report Expiration Period in days (range is 1‐2,000).
By default, the field is blank, which means reports never
expire.
3. Click OK to save your changes.
