Traffic logs are not displayed on Panorama after failure of selective push to Firewalls
3478
Created On 05/26/23 19:48 PM - Last Modified 09/03/24 21:28 PM
Symptom
- Selective push performed on Panorama to device groups (Firewalls)
- Some of the push fails on Firewalls
- After the failure of selective push, the traffic logs are not seen on Panorama or shown intermittently.
- "show system files" cli command reports configd crashes.
>show system files
/var/cores/crashinfo:
total 2.6M
-rw-rw-rw- 1 root root 840K Apr 17 11:33 configd-20230417113253-10.2.3-h4.info
-rw-rw-rw- 1 root root 849K Apr 24 15:39 configd-20230424153852-10.2.3-h4.info
-rw-rw-rw- 1 root root 22K May 7 16:38 nodejs-20230507163854-10.2.3-h4.info
-rw-rw-rw- 1 root root 843K May 11 00:07 configd-20230511000720-10.2.3-h4.info
- Configd.log (less mp-log configd.log) displays errors after commit.
2023-05-11 08:45:27.030 -0400 Error: pan_cfg_tpl_update_variable_config_for_device_from_file(pan_cfg_templates.c:3458): Failed to read /opt/pancfg/mgmt/templates/template_Stack/013201031720-variable.xml, bad or does not exist on disk
2023-05-11 08:45:27.119 -0400 Error: pan_cfg_tpl_update_variable_config_for_device_from_file(pan_cfg_templates.c:3458): Failed to read /opt/pancfg/mgmt/templates/template_Stack/013201031833-variable.xml, bad or does not exist on disk
Environment
- Palo Alto M-600 Panorama
- PAN-OS 10.2.3x, 10.2.4x
- Partial device group push
Cause
Software Issue.
Resolution
- The issue is resolved under PAN-217053 in 10.2.4-h3, 10.2.5, 11.1.0 and higher versions.
- Upgrade to the above versions will resolve the issue.
- As a workaround, perform a "full" push to all the device Groups instead of partial/selective push.