Attempting a commit on a device group or Template from Panorama causes the following error:
Error: Number of services (xxxx) exceeds platform capacity (yyyy) (Module: device) Commit failed
Where xxxx exceeds yyyy.
Verify the maximum number of supported services by a Palo Alto Networks device with the following CLI command:
> show system state | match cfg.general.max-service
For Panorama or M-100 running OS 5.0 or later:
Under Panorama > Setup > Mangement > Panorama Settings, disable "Share Unused Address and Service Objects with Devices" to prevent the unnecessary sharing of unused service objects on the devices.
Note: If all the service objects created on the M-100 or Panorama is being utilized by all managed devices, then some service objects need to be aggregated
For more information on disabling this feature, see: How to Limit the Number of Shared Objects Panorama Pushes to the Managed Device.