Cortex Data Lake Inventory page showing NA for a secondary NGFW of an HA pair

Cortex Data Lake Inventory page showing NA for a secondary NGFW of an HA pair

450
Created On 01/27/24 12:11 PM - Last Modified 10/17/25 21:38 PM


Symptom


Upon association and onboarding of HA pair NGFWs with the Cortex Data Lake, the Inventory page reports the status for Secondary NGFW as NA instead of Connected status.



Environment


An HA pair NGFWs associated and connected with the Cortex Data Lake



Cause


The Cortex Data Lake tenant ID (custID) should be set on both NGFWs. This scenario occurs when the custID missing on secondary NGFW. 

Note: custID refers to the Tenant ID of the CDL which is connected to both HA pair NGFWs



Resolution


From a  CLI session of secondary NGFW, the following commands show whether or not the custID or customer-id is set. If not set, contact Palo Alto Networks technical support to properly set the custID (tenant ID) on the secondary NGFW.

show system state | match cfg.lcaas
AND
show system state | match cust
OR
show system state | match sdb   



Additional Information


Legend:
NGFW: Next Generation FireWall
CDL: Cortex Data Lake


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WomCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail