A logging infrastructure may need to handle more than 10,000 logs per second.
Which two options support a dedicated log collector function? (Choose two.)
Correct Answer: B,C
Explanation/Reference:
B: Each M-500 appliance can process up to 60,000 logs/second.
M-100 appliance in Log Collector Mode. Each M-100 appliance can process up to 30,000 logs/second and store up to 4TB of log data.
C: M-100 appliance in Log Collector Mode. Each M-100 appliance can process up to 30,000 logs/second.
Note: To enable the Panorama management server (Panorama virtual appliance or M-Series appliance in Panorama mode) to manage a Log Collector, you must add it as a managed collector. The M-Series appliance in Panorama mode has a predefined (default) local Log Collector. However, switching from Panorama Mode to Log Collector Mode would remove the local Log Collector and would require you to re- configure the appliance as a Dedicated Log Collector (M-Series appliance in Log Collector mode).
Incorrect Answers:
A: With only up to 10,000 logs/second recommended log collector:
Depends on the Panorama management server:
* Virtual appliance-Panorama collects logs without any Log Collector.
* M-Series appliance-Local default Log Collector
D: M-100 without Panorama installed, would use the Local default Log collector, and would handle maximum 10,000 logs per second.
References: https://www.paloaltonetworks.com/documentation/70/panorama/panorama_adminguide/ manage-log-collection/log-collection-deployments#18043
Recent Comments (The most recent comments are at the top.)
The answer is B and D
https://docs.paloaltonetworks.com/panorama/7-1/panorama-admin/panorama-overview/panorama-platforms.html