How to Troubleshoot "FSM init failed. Log forwarding will not work!"

To provide troubleshooting steps when the error message "FSM init failed. Log forwarding will not work!" is seen in the logrcvr (less mp-log logrcvr.log) logs.

• Panorama
• Strata Logging Services
• PAN-OS 10.1 and above
• The firewall is not able to forward logs to Panorama
• The firewall is not able to forward logs to Strata Logging Service
• The firewall's logrcvr.log is generating the sample log below:

  Error: _logrcvr_fsm_init(pan_log_receiver.c:20932): FSM init failed. Log forwarding will not work

1. Check Connectivity
   1. Use the knowledge article How to Troubleshoot Firewall Connectivity to Panorama. 
   2. After making the necessary adjustments to the configuration, verify connectivity using the following CLI command

> show netstat all yes programs yes verbose yes numeric-ports yes numeric-hosts yes | match <Server IP>

2. Check for Stale Entries in the Session Table
   1. Ensure there are no stale deny/drop entries in the session table. Refer to the knowledge article How to Filter Active Sessions from the CLI for guidance.

3.    Verify Log Forwarding Profile Configuration
   1. For Panorama users use the knowledge article How to troubleshoot 'Collector preference list does not exist'
   2. For Strata Logging Services, please open a TAC case and instruct the engineer to use the internal KB provided below:
      
      Article Number: 000023158
      Article Title: "Logging Service Preference List does not exist" : CDL : FW does not send logs to CDL
4. Check on Log Forwarding Profile Match list's Filter setting, use Firewall Log Forwarding fails with error message: Could not initialize FSM as a guide.