The BGP left established state notification is not logged in the Prisma Access Insights dashboards.

The BGP left established state notification is not logged in the Prisma Access Insights dashboards.

1584
Created On 08/04/24 23:43 PM - Last Modified 12/05/25 21:34 PM


Symptom


  • The BGP peer flapped, for a duration of 1-3 minutes before the session returned to the established state.
  • The peer device logs confirm that these BGP state changes occurred.
  • No corresponding log entries for this BGP event arev found within the Prisma Access Insights (Remote Networks).
  • The system failed to raise the INC_RN_ECMP_BGP_DOWN alert for this event.

Environment


  • Prisma Access(SASE)
  • Remote Networks

Cause


  • The INC_RN_ECMP_BGP_DOWN alert in Insights is only triggered if the BGP connection remains down for a minimum duration of 10 minutes.
  • Since the BGP downtime in this instance never exceeded the 10-minute threshold, the corresponding alert is not generated.

Resolution


  1. The behavior is as designed.
  2. It is documented in the Prisma Access Documentation.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HDpDCAW&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language