Activate Strata Logging Service
Focus
Focus
Strata Logging Service

Activate Strata Logging Service

Table of Contents

Activate Strata Logging Service

This is how you activate Strata Logging Service.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • NGFW (Managed by PAN-OS or Panorama)
  • NGFW (Managed by Strata Cloud Manager)
  • Strata Logging Service
After purchasing Strata Logging Service, you should have received an email with a link to activate Strata Logging Service. Click on the link and follow the steps below to complete activation.
You do not need to follow this procedure if you have already activated Strata Logging Service as part of another product purchase (for example, Prisma Access).
If you are using PAN-OS 10.0 or later firewalls, and if you were sharing telemetry data with Palo Alto Networks prior to purchasing a Strata Logging Service license, then you already have a small, unlicensed Strata Logging Service instance. This instance exists solely for the purpose of processing your PAN-OS telemetry data.
When you activate your license Palo Alto Networks will upgrade this tenant to a full Strata Logging Service instance, so long as the region you use to send telemetry data to Palo Alto Networks is the same region that you use when you activate your Strata Logging Service license. If you use different regions for this purpose, then the small telemetry-specific tenant will not upgrade to your new, licensed Strata Logging Service instance.
When your Strata Logging Service subscription expires, you’ll have a 30-day grace period to renew your license before log data is deleted.
  1. Click on the link in your purchase confirmation email.
  2. Select your Strata Logging Service subscription and click Activate Subscription.
  3. Log in to the hub with your Palo Alto Networks Customer Support credentials.
  4. Select the customer support account that you want to associate with your subscription.
  5. If you are activating the Strata Logging Service instance in a new tenant service group (TSG), select Create New from the Tenant drop-down list and then enter a tenant name.
    Or
    If you want to add the Strata Logging Service instance to an existing TSG, select the TSG from the drop-down list. A tenant can have only one Strata Logging Service instance running on it.
  6. Select the geographical Region for your Strata Logging Service instance.
  7. Add a Strata Logging Service instance to the TSG.
    Cortex XDR cannot receive logs from Strata Logging Service tenants that are created with a partial license. The partial licensing is allowed when you activate Strata Logging Service for Prisma Access only.
  8. Verify the storage space and region for your Strata Logging Service instance.
    If you choose to store Strata Logging Service data (after activation, onboard and configure your device and click Inventory > turn on Store Log Data to store log data), Strata Logging Service will keep a record of your logs for future reference. If you choose not to, Strata Logging Service will delete the logs after they are used for whatever analytics services you have subscribed to (for example, IoT Security), without saving a copy.
  9. Review your selections, Agree to the Terms and Conditions, and click Activate Now.
  10. Verify the Strata Logging Service status.
    1. Sign In to the hub at https://apps.paloaltonetworks.com/.
    2. Select the Strata Logging Service instance for which you want to view status. If you have multiple Strata Logging Service instances, hover over the Strata Logging Service tile and then select from the list of available instances associated with your account.
    3. Confirm the following Status details:
      • Service status and the amount of storage used as a ratio of total storage you have purchased.
      • The geographic region where your logs are stored.
      • Verify your configuration on the different log types (sources) from which the Strata Logging Service is receiving logs, and the log storage space allocated for each log subtype.
  11. Onboard devices to Strata Logging Service (Onboard Firewalls to Strata Logging Service with Panorama or Onboard Firewalls to Strata Logging Service without Panorama), then configure your devices to send logs to Strata Logging Service, and configure your log storage settings.
  12. Allow traffic from your source to connect to Strata Logging Service.