In this management minute, Craig Stancill, Sr. Technical Marketing Engineer, discusses how to configure log forwarding preference lists, so you can spread ingestion across collectors in a group.
Follow along as he provides an example in Panorama with a scenario in which Panorama is managing devices and 3 collectors. He demonstrates how to forward logs from these firewalls to a collector group in such a way that we split the ingestion mode between M-200-1 and M-200-2. Each M-200 has a specific capacity to ingest logs, and we want to be able to use that capacity to the greatest effect. The goal here is to create one log forwarding preference list per collector in the group, and then we are going to divide our firewalls evenly among those preference lists
Still got questions about Log Forwarding Preference Lists? Post a question in our discussion forum:
https://live.paloaltonetworks.com/t5/General-Topics/bd-p/members_discuss
