the qualifying users of Strata Logging Service using the new license that comes with one year log
retention.
The Dashboard gives you the latest status of your Strata Logging Service
instance. It displays several widgets that report on various metrics that you can use to
assess the health of the instance.
If you are using Strata Cloud Manager to manage Strata Logging Service, click SettingsStrata Logging ServiceOverview to check the status of your Strata Logging Service
instance.
Widget
Description
Connection Status
Displays the number of firewalls associated with your Strata Logging Service tenant
and identifies them with each of the following statuses:
Connected—The
firewall has an active channel through which it is sending session
logs to Strata Logging Service.
Partially Connected—The firewall does not have an active channel through which it is
sending session logs to Strata Logging Service.
However, it is sending Enhanced Application logs on a
session-less channel.
Disconnected—The firewall does not have an active channel
through which to send sessions logs to Strata Logging Service, and it
is not sending Enhanced Application Logs.
Need Certificate—The firewall does not have the certificate
to connect to Strata Logging Service
Click on any of these
statuses to view the relevant firewalls on the Inventory page.
Below
the connection statuses, you can see whether a Panorama is associated with
your Strata Logging Service instance.
You can also see how many
firewalls in your customer support account are available for onboarding.
Clicking the text launches firewall onboarding.
Forwarding Log Rate
Provides a graph of the logs that Strata Logging Service is forwarding to an external
solution. The graph shows the current (avg over the last 5 mins)
forwarding log rate for the tenant, how that rate varies from the
average over time, and the trend of the log rate over time.
You can choose a time period
of 24 hours, 7 days, or 30 days.
Forwarding Log Table
Displays the logs that Strata Logging Service
is forwarding to external destinations, organized by destination.
Profile Type—The type of log forwarding
profile that is forwarding logs to the destination.
Profile Name—The name of the log forwarding profile that
is forwarding logs to the destination.
Log Types Forwarded—The types of logs that Strata Logging Service
is forwarding to the destination.
Average Forwarding Rate—The average rate at which Strata Logging Service is
forwarding logs to the destination.
Forwarding Log Count—The number of logs that Strata Logging Service is forwarding to
the destination.
Retry Log Count—The number of logs that did not arrive at the destination.
Forwarding Log Size—The size of the logs that Strata Logging Service is forwarding to
the destination.
Incoming Log Rate
Provides a graph of the logs that Strata Logging Service is ingesting. The graph
shows the current (average over the last 5 minutes) incoming log
rate for the tenant, how that rate varies from the average over
time, and the trend of the log rate over time.
You can choose a time period of 24 hours, 7 days,
or 30 days.
If you have enabled enhanced application
logging on any firewalls or Prisma Access,
the incoming log rate will include that as well.
Incoming Log Table
Displays the logs that Strata Logging Service
is receiving from connected devices, organized by log type. You
can Search for specific information in the
table as well as select a time range of Last 24 Hours, Last
7 Days, or Last 30 Days.
Actual Retention—The number of
days that Strata Logging Service has stored the logs.
Target Retention—The number of days that you have set for
Strata Logging Service to store logs. Logs older than this value are deleted.
Avg Incoming Log Rate—The average rate at which your devices
are sending logs to Strata Logging Service.
Storage Used—The amount of storage used out of the storage
you have allocated for the log type.
License Information
Displays your license expiry date with a countdown
from the current date to help you know when it’s time to renew.
Shows instance details such as name,
tenant ID, and serial number to quickly help Customer Support identify
your instance if an issue arises.
Log Forwarding Status
Provides the status of the different log
forwarding profiles that you have configured to stream logs from
Strata Logging Service to external sources like syslog servers or SIEMs.
A log forwarding profile can have the following states:
Running—The log forwarding profile is ready to forward logs if the destination is reachable and
ready to receive logs.
Failed—The log forwarding profile is not sending logs to the destination.
Pending—Strata Logging Service is setting up your log forwarding profile. This is a temporary state
when you create or modify a profile.
Latency
Displays the latency both for ingestion
and log forwarding.
Ingestion latency is the time between when a log is generated on the firewall or Prisma Access to when it becomes available in Strata Logging Service for querying.
Log Forwarding latency is the time between when the log is generated on the firewall or Prisma Access to when it becomes available in Strata Logging Service for log forwarding.
The value presented here
is the P50, which means that Strata Logging Service will receive 50% of
the logs with a lower latency.
This widget presents the real-time
data for all logs received by Strata Logging Service in the last five
minutes. This widget also provides a comparison of the real-time latency
with the average of the past 24 hours.
Service Availability
Provides the availability of the ingestion
and log forwarding components within Strata Logging Service. This widget
shows real-time availability as well as hourly availability over
the last 24 hours. The components can have the following states:
Available: The ingestion or log forwarding components are working
perfectly fine.
Impacted: The ingestion or log forwarding components are
in a degraded state that is causing a processing delay for ingestion
and log forwarding. You will not lose logs, but you might see a
delay in log availability for querying and log forwarding.
Unavailable: The ingestion or log forwarding components are
down and causing log loss.
Storage
Shows the total amount of storage that you
have purchased for your Strata Logging Service tenant and how much you
have used.
Strata Logging Service retrieves this information in
real-time, so it might differ from the information shown in the StorageStatus/Configuration, which updates at a different interval.
If you are using Strata Cloud Manager to view or configure
storage quota, click SettingsStrata Logging ServiceStorage Status / Configure Quota.