High pancfg utilization due to high tags_ip_rev collections
1703
Created On 12/28/23 15:50 PM - Last Modified 03/04/25 21:43 PM
Symptom
- High pancfg utilization
- Dynamic updates installation to fail
- Unable to access Panorama GUI
Environment
Cause
Resolution
Upgrade to PAN-OS releases 11.1.0, 11.0.4, 10.2.5, 10.1.12, 10.2.8, 10.2.7, 10.1.11-h3.
Additional Information
https://jira-dc.paloaltonetworks.com/browse/PAN-193004
Due to broken migration from DAU2 to DAU3 due to changes in the DB structure for DAU. The earlier fix migrated the script to JS but the actual issue was wrong mongo queries and mismatched DB names.
Perform the following steps on root:
1. Log in to the root and enter into mongo shell.
[root@vlmazprdpan01 ~]# mongo
2. Drop the IP TAG collection in MongoDB.
> use pancfg > db.tags_ip_rev.drop() > exit
3. Recreate mongo indexes:
[root@vlmazprdpan01 ~]# python /usr/local/bin/mongo_indexes.py
4. Force AWS or Azure plugin sync:
[root@vlmazprdpan01 ~]# su <username> (superuser account username) e1075442@vlmazprdpan01> request plugins azure sync e1075442@vlmazprdpan01> request plugins aws sync