How to troubleshoot 'Collector preference list does not exist'

How to troubleshoot 'Collector preference list does not exist'

6508
Created On 09/08/23 07:41 AM - Last Modified 10/29/24 20:50 PM


Objective


Steps to troubleshoot "Log Collector Preference List does not exist" message.



Environment


  • Panorama
  • Strata Logging Services (SLS)
  • PAN-OS 10.1 and above
  • The firewall is not able to forward logs to Panorama
  • The firewall is not able to forward logs to Strata Logging Services
  • Having the same result as below:
> show log-collector preference-list
Log Collector Preference List does not exist
  • logrcvr.log (less mp-log logrcvr.log) is generating the sample log below:
-0800 Collector preference list does not exist /opt/pancfg/mgmt/global/lcs-pref.xml 


Procedure


  1. Ensure that Panorama is not running in Legacy mode. You can reference Switching Panorama VM from Legacy mode to Panorama mode for guidance.
  2. Utilize Configure a Collector Group as a guide
  3. If the previous procedures do not resolve the issue, refer to  Firewall not sending logs to correct log collector
  4. As a last resort, restart the following services in the NGFW
> debug software restart log-receiver
> debug software restart process management-server 

Note: Typically restarting the management server process does not affect the packet forwarding except that the admin will be kicked out. For details Refer How to restart management server process.



Additional Information


  • If you are a Strata Logging Service (SLS) user, please open a TAC case and instruct the engineer to use the internal KB provided below:
    • Article Number: 000023158
    • Title: "Logging Service Preference List does not exist" : CDL : FW does not send logs to CDL. 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000XgPqCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail