©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
107
Manage
Log
Collection
All
Palo
Alto
Networks
next
‐
generation
firewalls
can
generate
logs
that
provide
an
audit
trail
of
firewall
activities.
To
centrally
monitor
the
logs
and
generate
reports,
you
must
forward
the
logs
generated
on
the
managed
firewalls
to
Panorama.
You
can
then
configure
Panorama
to
aggregate
the
logs
and
forward
them
to
remote
logging
destinations.
If
you
forward
logs
to
a
Panorama
virtual
appliance
with
a
virtual
disk
or
NFS
datastore,
you
do
not
need
to
perform
any
additional
tasks
to
enable
logging.
If
you
will
forward
logs
to
an
M
‐
100
appliance—either
locally
on
an
M
‐
100
appliance
in
Panorama
mode
or
to
a
dedicated
Log
Collector
(M
‐
100
appliance
in
Log
Collector
mode)—you
must
perform
some
additional
tasks
to
enable
log
collection.
You
must
add
each
Log
Collector
as
a
Managed
Collector
and
create
Collector
Groups
to
access,
manage,
and
update
the
Log
Collectors
using
Panorama.
After
you
add
and
configure
the
Log
Collectors
on
Panorama,
Panorama
pushes
the
necessary
configuration
to
the
managed
devices.
To
determine
which
deployment
best
suits
your
needs,
see
.
The
following
topics
describe
how
to
configure
log
collection.
To
manage
the
system
and
configuration
logs
that
Panorama
generates
locally
for
itself,
see
