Is there a email queue on the firewall and Panorama and how can I see it and clear it?

Is there a email queue on the firewall and Panorama and how can I see it and clear it?

14770
Created On 06/24/19 21:38 PM - Last Modified 10/05/20 20:21 PM


Question


Is there a email queue on the firewall and Panorama and how can I see it and clear it?

Environment


  • PANOS devices


Answer


Yes, there is a queue for emails on the firewall.

On the firewall run the following. Mail queue = 0 in this output.
[Firewall]>debug log-receiver statistics

Logging statistics 
Fileext logs written: 0 
Fileext logs URL not written: 0 
Fileext logs URL not written (timedout): 0 
URL cache age out count: 0 
URL cache full count: 0 
URL cache key exist count: 238 
URL cache wrt incomplete http hdrs count: 0 
URL cache rcv http hdr before url count: 0 
URL cache full drop count(url log not received): 0 
URL cache age out drop count(url log not received): 0 
Email hdr cache count: 0
Email hdr cache hit count: 0 
Traffic alarms dropped due to sysd write failures: 0 
Traffic alarms dropped due to global rate limiting: 0 
Traffic alarms dropped due to each source rate limiting: 0 
Traffic alarms generated count: 0 
Netflow incoming count: 0 
Log Forward count: 0 
Log Forward discarded (queue full) count: 0 
Log Forward discarded (send error) count: 0 
Total logs not written due to disk unavailability: 0 
Logs not written since disk became unavailable: 0 

Summary Statistics: 
Num current drop entries in trsum:0 
Num cumulative drop entries in trsum:0 
Num current drop entries in thsum:0 
Num cumulative drop entries in thsum:0 
Num current drop entries in gtpsum:0 
Num cumulative drop entries in gtpsum:0 

External Forwarding stats: 
Type    Enqueue Count    Send Count      Drop Count    Queue Depth    Send Rate(last 1min ) 
syslog  284767                 284767             0                     0                        9          2 
snmp    0                          0                       0                     0                        0 
email    0                          0                       0                      0                       0           
raw       284767                284767             0                      0                       9          2 
http       0                          0                       0                      0                       0 
autotag 0                          0                       0                      0                       0

On Panoramarun
Panorama   > debug log-collector log-collection-stats show log-forwarding-stats

syslog enqueued count: 0
syslog sent count: 0
syslog dropped count: 0
syslog Queue depth: 0

snmp enqueued count: 0
snmp sent count: 0
snmp dropped count: 0
snmp Queue depth: 0

email enqueued count: 0
email sent count: 0
email dropped count: 0
email Queue depth: 0

raw enqueued count: 0
raw sent count: 0
raw dropped count: 0
raw Queue depth: 0

http enqueued count: 0
http sent count: 0
http dropped count: 0
http Queue depth: 0

autotag enqueued count: 0
autotag sent count: 0
autotag dropped count: 0
autotag Queue depth: 0
  1.  To clear the email queue from a firewall, you can use following command:
>debug software restart process log-receiver
  1.  To clear the email queue from Panorama, you can use following command:
> debug software restart process logd
  1. If the above command on Panorama does not help, then you need to run following command on Panorama:
> debug software restart process management-server


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMCvCAO&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language