ACC Report does not display data for values lower than 24 hours
4671
Created On 01/12/24 14:22 PM - Last Modified 04/15/24 21:20 PM
Symptom
When querying the ACC logs on the Firewall, different time filters display different results.
- For "Last 15 mins, 1 hr, 6 hrs or 12 hrs" it results in "No data to display".
- The "Last 24 hrs" filter displays inaccurate output.
- A value higher than "Last 24 hrs" displays accurate/expected output.
Environment
- Palo Alto Firewalls
- PAN-OS versions
- 10.1.11-h1 or higher
- 10.2.6 or higher
- 11.0.2-h2 or higher
- 11.1.0 or higher.
Cause
Software Issue.
Resolution
- The issue is resolved under PAN-234929
- Upgrading to the fixed versions will resolve the issue (currently 10.2.8, 10.2.7-h3)
- Check the current values of offline-logpurger
- Change the values for offline-logpurger (increase interval/decrease threshold).
- Wait 15-30 minutes after running these commands and recheck. The ACC report behavior should work fine.
> show clock
> show logrcvr offline-logpurger interval
> show logrcvr offline-logpurger percentage-threshold
> set logrcvr offline-logpurger percentage-threshold 50 > set logrcvr offline-logpurger interval 10 > debug software restart process log-receiver