URL 过滤、威胁、流量日志未显示 Firewall
57123
Created On 05/01/19 03:02 AM - Last Modified 03/20/25 03:22 AM
Symptom
- URL 过滤、威胁、流量日志在 firewall
Environment
- Firewall 平台
- 全部PAN-OS发布
- 监控日志
Cause
当firewall从数据平面生成大量流量日志或 Netflow 流量。 这将导致以下全局计数器:
流量日志关联的全局计数器:
log_traffic_loss_cnt Number of traffic logs that are lost log_traffic_loss_queue_full Number of traffic logs that are lost due to next queue is full
威胁日志关联的全局计数器:
log_threat_queue_full Number of threat log queues that is full log_threat_loss_cnt Number of threat logs that are lost
Resolution
要解决此问题,需要降低日志记录率。 以下是三个建议: