Email "Alert | Cortex Data lake Log Forwarding - Syslog server disconnected at" yyyy-mm-dd

Email "Alert | Cortex Data lake Log Forwarding - Syslog server disconnected at" yyyy-mm-dd

2287
Created On 07/14/22 01:08 AM - Last Modified 11/02/23 01:03 AM


Symptom


 HUB > CDL > Dashboard > "Forwarding Log rate" = 0.
image.png
  • Alerts are received from "noreply@cs.paloaltonetworks.com" as 
Subject : Alert | Cortex Data lake Log Forwarding - Syslog server disconnected at yyyy-mm-dd


Environment


  • Cortex Data Lake
  • Log Forwarding to (internal/external) Syslog Server


Cause


Backend Issue.

Resolution


  1. Make a temporary change to one of the log forwarding profiles
  2. Remove the change and save the profile.
  3. This will re-trigger the log profile to start sending logs.
  4. If the issue is still unresolved, open a case with Support.

 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqWnCAK&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail