초기 구성 후 Panorama가 Strata Logging Service에 연결할 수 없습니다.
6587
Created On 10/10/24 09:03 AM - Last Modified 01/07/25 01:33 AM
Symptom
- Strata Logging Service에 맞게 Panorama가 구성되었습니다.
- When checking the status "request plugins cloud_services logging-service status", the following error message is displayed.
> request plugins cloud_services logging-service status fail Exception 'customer-id' - In lcaas_agent.log (less mp-log lcaas_agent.log), response code 401 can be seen.
16:13:39,693 lcaas_agent INFO URL=https://lic.lc.prod.us.cs.paloaltonetworks.com:444/Platform/CustomerInfo/ 16:13:39,693 lcaas_agent INFO CERT=/opt/pancfg/mgmt/ssl/private/device.crt 16:13:40,397 lcaas_agent INFO response from orchestrator=b'{"code":401,"message":"Got error. No provisioned tenant id found for serial number in cert subject: ClientCert.Subject(commonName=000702042476, orgUnit=null, serialNumber=null, oid=OID.1.3.6.1.4.1.25461.4.22.1)","timeStamp":"2024-10-08T07:13:40.311Z"}' 16:13:40,398 lcaas_agent INFO Resp from cloud service : b'{"code":401,"message":"Got error. No provisioned tenant id found for serial number in cert subject: ClientCert.Subject(commonName=000702042476, orgUnit=null, serialNumber=null, oid=OID.1.3.6.1.4.1.25461.4.22.1)","timeStamp":"2024-10-08T07:13:40.311Z"}' 16:13:40,398 lcaas_agent ERROR Customer is not provisioned in CSP - 라이센스 및 디바이스 인증 에는 문제가 없습니다.
- From a packet capture on a management interface, you do not observe any traffic from port 444.
> tcpdump snaplen 0 filter "tcp port (3978 or 80 or 443 or 444) or udp port 53"
Environment
- 파노라마
- 지원되는 PAN-OS
- Strata Logging Service(이전 Cortex Data Lake)
Cause
Panorama는 Strata Logging Service 테넌트에 등록되어 있지 않습니다.
Resolution
Strata Logging Service에 맞게 Panorama를 구성하는 단계에 따라 Panorama에 탑승합니다.