How To Clear the "hints" counters after checking number of hints on disk

• PAN-OS 10.1 and above
• Palo Alto Next-Generation Firewall
• Log forwarding Configured

1. Run the following command on the firewall and log the output.

debug log-receiver rawlog_fwd show hints-stats

2. Run the command in CLI to clear the hint counters:

debug log-receiver rawlog_fwd clear hints-all

Note: In PAN-OS 11.0 or prior, "debug log-receiver rawlog_fwd clear hints-all" only clears out 64 hints at one time.

3. Rerun the show command to look at the progress:

debug log-receiver rawlog_fwd show hints-stats

• For 10.1.x version, the list of commands which are seen under log-receiver is presented below:

debug log-receiver rawlog_fwd on hint on
debug log-receiver rawlog_fwd clear hints-all
debug log-receiver rawlog_fwd show hints
debug log-receiver rawlog_fwd show hints-stats
debug log-receiver rawlog_fwd show hints-max
debug log-receiver rawlog_fwd show hints-expiration-duration
debug log-receiver rawlog_fwd set hints-max <0-20000>
debug log-receiver rawlog_fwd set hints-expiration-duration <0-846000>

• For 10.0 and below PAN-OS versions:

1. Run the following commands on the firewall and log the output.

debug management-server rawlog_fwd show hints-stats
debug management-server rawlog_fwd_dpi show hints-stats
debug management-server rawlog_fwd_trial show hints-stats
debug log-receiver rawlog_fwd show hints-stats

2. Run these commands in CLI to clear the hint counters:

debug management-server rawlog_fwd clear hints-all
debug management-server rawlog_fwd_dpi clear hints-all
debug management-server rawlog_fwd_trial clear hints-all
debug log-receiver rawlog_fwd clear hints-all

3. Rerun these show commands to look at the progress:

   debug management-server rawlog_fwd show hints-stats
   debug management-server rawlog_fwd_dpi show hints-stats
   debug management-server rawlog_fwd_trial show hints-stats
   debug log-receiver rawlog_fwd show hints-stats