©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
143
Manage
Log
Collection
Log
Collection
Deployments
Step
9
Manually
fail
over
so
that
the
secondary
Panorama
becomes
active.
Use
the
web
interface
of
the
primary
Panorama
to
perform
the
following
steps:
1.
Select
Panorama > High Availability
.
2.
Click
Suspend local Panorama
in
the
Operational
Commands
section.
Step
10
On
the
secondary
Panorama,
configure
the
network
settings
of
the
Log
Collector
that
is
local
to
the
primary
Panorama.
Use
the
web
interface
of
the
secondary
Panorama
to
perform
the
following
steps:
1.
In
the
Panorama
web
interface,
select
Panorama > Managed
Collectors
and
select
the
Log
Collector
that
is
local
to
the
primary
Panorama.
2.
Enter
the
IP
address
or
FQDN
of
the
secondary
Panorama
in
the
Panorama Server IP
field.
Enter
the
IP
address
or
FQDN
of
the
primary
Panorama
in
the
Panorama Server IP 2
field.
These
fields
are
required.
3.
Select
the
Management
tab
and
complete
one
or
both
of
the
following
field
sets
(depending
on
the
IP
protocols
of
your
network)
with
the
management
interface
values
of
the
primary
Panorama:
•
IPv4—
IP Address
,
Netmask
,
and
Default Gateway
•
IPv6—
IPv6 Address/Prefix Length
and
Default IPv6
Gateway
4.
Click
OK
and
Commit
,
for
the
Commit Type
select
Panorama
,
and
click
OK
.
Wait
until
the
HA
synchronization
finishes
before
proceeding.
5.
Click
Commit
,
for
the
Commit Type
select
Collector Group
,
select
the
Collector
Groups
you
added,
and
click
OK
.
Step
11
Manually
fail
back
so
that
the
primary
Panorama
becomes
active.
Use
the
web
interface
of
the
secondary
Panorama
to
perform
the
following
steps:
1.
Select
Panorama > High Availability
.
2.
Click
Suspend local Panorama
in
the
Operational
Commands
section.
Step
12
Configure
log
forwarding.
Use
the
web
interface
of
the
primary
Panorama
to:
1.
2.
.
3.
(
Optional
)
You
can
configure
separate
external
server
profiles
for
different
log
types
and
severity
levels.
You
can
also
assign
separate
profiles
to
each
Panorama
HA
peer.
For
example,
you
might
want
each
peer
to
forward
logs
to
a
different
syslog
server.
To
make
each
Panorama
peer
forward
logs
to
different
external
services,
log
in
to
the
web
interface
of
each
peer,
select
Panorama > Collector Groups
,
select
the
Collector
Group,
select
Collector Log Forwarding
,
assign
the
server
profiles,
and
click
OK
.
Deploy
Panorama
with
Default
Log
Collectors
(Continued)
