High pancfg utilization due to high tags_ip_rev collections

High pancfg utilization due to high tags_ip_rev collections

1703
Created On 12/28/23 15:50 PM - Last Modified 03/04/25 21:43 PM


Symptom


  • High pancfg utilization
  • Dynamic updates installation to fail
  • Unable to access Panorama GUI


Environment




Cause


PAN-193004



Resolution


Upgrade to PAN-OS releases 11.1.011.0.410.2.510.1.1210.2.810.2.710.1.11-h3.



Additional Information


https://jira-dc.paloaltonetworks.com/browse/PAN-193004

Due to broken migration from DAU2 to DAU3 due to changes in the DB structure for DAU. The earlier fix migrated the script to JS but the actual issue was wrong mongo queries and mismatched DB names.

Perform the following steps on root:

1. Log in to the root and enter into mongo shell.

[root@vlmazprdpan01 ~]# mongo

2. Drop the IP TAG collection in MongoDB.

> use pancfg
> db.tags_ip_rev.drop()
> exit

3. Recreate mongo indexes:

[root@vlmazprdpan01 ~]# python /usr/local/bin/mongo_indexes.py

4. Force AWS or Azure plugin sync:

[root@vlmazprdpan01 ~]# su <username> (superuser account username)

e1075442@vlmazprdpan01> request plugins azure sync

e1075442@vlmazprdpan01> request plugins aws sync


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000XhOACA0&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail