Commit time is taking more than expected on M-600 Panorama

Commit time is taking more than expected on M-600 Panorama

1420
Created On 01/22/24 17:26 PM - Last Modified 01/27/25 22:32 PM


Symptom


  • Commit is taking more than expected on Panorama running 10.1.10
  • sw_fw_license plugin version 1.0.0 is installed on the Panorama. 
  • Configd.log is showing that pan_plugin_pre_commit_process is causing a delay with the commit :
10:11:37.126 +0000 SEATTLETIME: Time to GENCOMMITCAND:pan_cfg_save_commit_candidate: 34 secs
10:11:37.126 +0000 SEATTLETIME: Time to COMMITCFGCOOKIE:pan_cfg_generate_commit_candidates: 34 secs
10:11:38.044 +0000 SEATTLETIME: Time to PRECOMMIT:pan_cfg_commit_cfg_by_cookie: 47 secs
10:11:38.044 +0000 SEATTLETIME: Time to PROCESSJOB:pan_cfg_pre_commit_processing: 47 secs
10:13:34.733 +0000 SEATTLETIME: Time to PROCESSJOB:pan_plugin_pre_commit_process: 116 secs
10:13:37.863 +0000 SEATTLETIME: Time to PROCESSJOB:pan_cfg_commit_verify_schema: 3 secs
10:13:49.063 +0000 SEATTLETIME: Time to PROCESSJOB:pan_cfg_commit_verify_schema: 12 secs


Environment


  • Palo Alto Firewalls or Panorama
  • PAN-OS 10.1.x
  • sw_fw_license plugin with version 1.0.0


Cause


Sw_fw_license plugin causing GUI and CLI sluggishness

Resolution


  1. This happens due to the sw_fw_license plugin issue.
  2. The issue has been fixed in the sw_fw_license version 1.1.2 under PLUG-12911.
  3. Update the plugin and apply the workaround below to resolve the issue.
    admin@Panorama> request plugins sw_fw_license dgquery turnoff yes
    SDB cfg.lic_mon.turnoff_dgquery set to true
    
    admin@Panorama> request plugins reset-plugin plugin-name sw_fw_license Plugin sw_fw_license has been reset.
     
  4. To view the release notes of plugin, go to "Panorama > Plugins > "search for license" in the top bar > click on "sw_fw_license-1.1.2" > Click on the release notes on the right side.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WiACAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail