A distributed log collection deployment has dedicated Log Collectors. A developer needs a device to send logs to Panorama instead of sending logs to the Collector Group. What should be done first?

The correct answer is C. Remove the device from the Collector Group. In a distributed log collection deployment, each managed firewall is assigned to a Collector Group, which directs its logs to the dedicated Log Collectors. To redirect a specific device's logs to Panorama directly (bypassing the Collector Group), the device must first be…

Submitted by miguelv· Apr 18, 2026Deploy and Configure

Question

Options

AContact Palo Alto Networks Support team to enter kernel mode commands to allow adjustments
BRevert to a previous configuration
CRemove the device from the Collector Group
DRemove the cable from the management interface. reload the Log Collector and then re-connect

How the community answered

(25 responses)

A
4% (1)
B
12% (3)
C
80% (20)
D
4% (1)

Explanation

In a distributed log collection deployment, each managed firewall is assigned to a Collector Group, which directs its logs to the dedicated Log Collectors. To redirect a specific device's logs to Panorama directly (bypassing the Collector Group), the device must first be removed from its Collector Group assignment. Once removed, Panorama can be configured as the log destination for that device. Options A and D describe unnecessary or disruptive actions. Option B (reverting configuration) would undo other changes and is not the appropriate targeted fix.

Topics

#Log Forwarding#Panorama#Log Collector Group#Device Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice