Critical Panorama Alarm - Minimum Retention Period (days) Violated for Segment

Critical Panorama Alarm - Minimum Retention Period (days) Violated for Segment

16020
Created On 09/26/18 13:51 PM - Last Modified 02/07/19 23:46 PM


Resolution

Symptom

The Panorama system logs shows the following critical error (lower log message):

p.JPG

Cause

In Panorama > Collector Groups, there is a configurable field called 'Min. Retention Period (days)' under the General tab. This minimum retention period field instructs Panorama to store collected log files for the entered number of days.p1.JPG

If the log collector is not able to keep logs for the minimum period specified, then the status is entered into the system logs. When the situation clears, another system log entry is generated, indicating the OK status. See the upper message in the image below:
p-1.JPG

Resolution

In order to lower/prevent the occurrences of the retention period violation messages in the logs, the minimum retention period can be set to a lower number in the Collector Group configuration.

owner: mbutt



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltOCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language