Device Connectivity in Logging Service Status shows an Error in GUI on PA-5450, PA-7000, and PA-7500 series, however the logs are uploaded to Strata Logging Service.

• Device Connectivity in Logging Service Status shows an Error in GUI on PA-5450, PA-7000, and PA-7500 series.
• Even with the error message, the logs are uploaded to Strata Logging Service(formerly Cortex Data Lake).

GUI: Device->Setup->Management->Cloud Logging->Cloud logging status->show status 



 

• PA-5450, PA-7000, and PA-7500 series.
• Strata Logging Service
• PAN-OS 10.1, 10.2, 11.0, 11.1, 11.2

• PA-5450, PA-7000, and PA-7500 series have multiple connection paths to Strata Logging Service. It is configurable and the default setting is 5. 

GUI: Device->Setup->Management->Cloud Logging

• If one or more connection paths fail, the Device Connectivity in Logging Service Status becomes "Error".
• The connection status is checked with the CLI command “> debug log-receiver log-forwarding-connections status”.

  > debug log-receiver log-forwarding-connections status
  
  LFP0:
  Connection status
  ------------------------------ -----------
  Active: 3    <<<<<
  lr0-34.x.x.x-172.16.x.x:
  address: 34.x.x.x
  status: ready
  lr0-34.x.x.x-1-172.16.x.x: 
  address: 34.x.x.x 
  status: ready
  lr0-34.x.x.x-2-172.16.x.x: 
  address: 34.x.x.x 
  status: ready
  Inactive: 2   <<<<<<
  lr0-34.x.x.x-3-172.16.x.x: address: 34.x.x.x 
  status: disconnected
  lr0-34.x.x.x-4-172.16.x.x: address: 34.x.x.x 
  status: disconnected

• In the above case, 3 of 5 paths are active, and 2 are inactive.

Depending on the connection status of the CLI command (“debug log-receiver log-forwarding-connections status”) and the actual log upload status, take the following actions.

1. One or more paths are inactive, log uploads are OK,   Continue to monitor the status until the status changes to "Success".
2. One or more paths are inactive, some log uploads are failing,  Contact Palo Alto Networks Technical Support.
3. All paths are inactive then separate troubleshooting is required. Contact Palo Alto Networks Technical Support.

• Logging Service shows "device connectivity" error in UI, though the logs are being sent to CDL (It is the same indication with a different case.)
• Troubleshooting firewall connectivity issues with Logging Service