Log storage
In its standalone configuration, a firewall has somewhere between a few terabytes of storage on high-end devices and a few gigabytes on low-end devices for logs (the PA-410 series doesn’t have local log storage as it was designed to be managed by Panorama or Strata Cloud Manager and send its logs to a log collector or SLS). This space then has to be split up among all the different log databases, such as Traffic, Threat, URL Filtering, WildFire, and several others. This could cause a skewed perception of how much log storage is actually available, which, combined with high traffic volumes, could lead to the system having only enough storage for a couple of days’ worth of logs.
To review the current log capacity and what percentage of the capacity has been assigned to individual databases, check Device | Setup | Management | Logging and Reporting Settings. You can change how much space is reserved for each log database by changing the percentage next to...