Hello guys,
I have a query, usually when we update a panorama, this can be delayed an additional 1 hour after the reset in which the logs are synchronized.
Is there any procedure for this to not occur and synchronization be faster?. I have not found any documentation where this is mentioned.
Any comment is good.
Regards.
Hi, sorry for the late reply!
There may be a delay due to several factors
have you verified no logs at all are seen for this amount of time, or could it be that you're receiving 'older' logs first?
you can manually tell a firewall to start forwarding logs with the following commands on panorama:
This one tells the firewall to continue where it stopped during the panorama reboot (oldest first)
> request log-fwd-ctrl action start-from-lastack device <serial>
This one tells the firewall to send the latest logs first
> request log-fwd-ctrl action latest device <serial>
Do verify that the firewall is connected to panorama before executing this command