Let me start by saying I appreciate this is a Cisco forum and I am a big fan of cisco.
I am however working for a client whom has PA firewall and PA does not allow you to post on their forum unless you have a subscription.
I am checking a Panorama and cannot see any logs.
How does one enable the logging functionality ?
same as what I found
it only meantions how to forward logs
the PAs are linux boxes and can see they have the rsyslog and syslog service running but still no local logging
what is worse there is no option or internet article to switch it on or off.
log forwarding will be triggered by the rules in PAN. If the packet matches the rule and the rule action has a log forwarding configured to Panorama direct. It does not require syslog per say.
Forwarding to syslog servers would then require server profile to be setup.