Device logs are not showing up in the Panorama GUI due to mismatch of the time.
Symptom
Environment
- PAN-OS 8.0 and above.
- Panorama Device managing Palo Alto Firewall.
Cause
Following is the output of show logging-status device <serial number>
The Last log generated time is higher than Last Log Rcvd.
Usually the Last Log Generated should be less than or equal to Last Log Rcvd, but not higher.
Resolution
You will see this if there is a time discrepency between the firewall and Panorama.
You cannot sync the clock between the firewall and Panorama.
You can set the time manually on both the firewall and Panorama by using the CLI command set clock date <value> time <value>.
The best option is to configure the NTP servers so that the time on the firewall and the Panorama will be the same.
To do so, go to Device > Setup > Services > NTP.
After synching the time between the firewall and Panorama, the logs will start to appear on the GUI.