Strata Logging Service
Strata Logging Service License
Table of Contents
Expand All
|
Collapse All
Strata Logging Service Docs
-
-
- Forward Logs to a Syslog Server
- Forward Logs to an HTTPS Server
- Forward Logs to an Email Server
- Forward Logs to Amazon Security Lake
- Forward Logs to AWS S3 Bucket
- Forward Logs to Snowflake
- Create Log Filters
- Server Certificate Validation
- List of Trusted Certificates for Syslog and HTTPS Forwarding
- Log Forwarding Errors
- Forward Logs With Log Replay
Strata Logging Service License
Learn about Strata Logging Service license.
| Where Can I Use This? | What Do I Need? |
|---|---|
| One of these:
|
Strata Logging Service empowers most of the threat detection and
response features in Palo Alto Networks products. Strata Logging Service enables
you to ingest, store, and forward log data from multiple products.
License Support for Qualifying and Non-Qualifying Users
Starting October 2024, Strata Logging Service supports a new
licensing scheme. By default, the new Strata Logging Service license comes
with a one year log retention period. The new license will be available to all
qualifying users (users who activate Strata Logging Service after October
2024 and do not currently have an existing Strata Logging Service
license).
Non-qualifying users, defined as users who have a Strata Logging Service
license obtained before October 2024, can maintain their current licensing scheme
until they are migrated to the new licensing model. Starting from March 2025, users
will receive notifications seven days before the migration process starts. The
migration will happen automatically and there is no action required from users.
To use Strata Logging Service, you can either procure a Strata Logging Service license or a Strata Cloud Manager Pro license, which
includes Strata Logging Service.
Here are the available options for using Strata Logging Service with different
products. If you are managing your Palo Alto Networks products using Strata Cloud Manager, it is essential to familiarize yourself with the Strata Cloud Manager licenses to better
understand the license options provided below.
| Product | License Options for Strata Logging Service |
|---|---|
| NGFW |
|
| Software NGFWs (FW-flex) | Select one of these options while creating a VM-Series deployment
profile:
|
| Prisma Access |
|
Migrate to New Strata Logging Service License
Starting from March 2025, all the users with existing Strata Logging Service
license will be automatically migrated to the new licensing model that comes with
unlimited log storage and a one year log retention period. The migration keeps your
current entitlements and allows you to benefit from new features such as longer log
retention. You will receive a notification seven days before the migration process
starts and after the migration is complete. If you are managing your Palo Alto
Networks products using Strata Cloud Manager, see the migration paths to know the license
changes after migration. The migration happens per Customer Support Portal (CSP).
The table outlines the migration exclusions.
| What will not be Migrated |
|---|
| Strata Logging Service with sized storage tenants hosted in China and FedRamp regions. |
| Any Strata Logging Service tenants with evaluation licenses only. |
| Strata Logging Service with sized storage evaluation or expired licenses and Strata Logging Service with sized storage active license with any product evaluation license ( for example, Prisma Access, ADEM, AIOps for NGFW) |
Features in New License Vs Existing License
| Features | New License - Qualifying
Users | Existing License - Non-qualifying Users |
|---|---|---|
| Sizing | No TB sizing required. By default, the license comes with one year log retention period. | Size and purchase the required TB units. |
| Log storage Quota | Set the maximum log retention days for log types - click Strata Logging Service > Retention | Set the log quote by percentage of TB units and the maximum log retention days for log types - click Strata Logging Service > Storage > Configuration |
| Onboard devices | You must have enough licenses to add devices to tenant. | You are not limited to number of devices you can add to your tenant. |