Traffic logs are not displayed on Panorama after failure of selective push to Firewalls

Traffic logs are not displayed on Panorama after failure of selective push to Firewalls

3478
Created On 05/26/23 19:48 PM - Last Modified 09/03/24 21:28 PM


Symptom


 
  • Selective push performed on Panorama to device groups (Firewalls)
  • Some of the push fails on Firewalls
  • After the failure of selective push, the traffic logs are not seen on Panorama or shown intermittently.
  • "show system files" cli command reports configd crashes.
>show system files
/var/cores/crashinfo:
total 2.6M
-rw-rw-rw- 1 root root 840K Apr 17 11:33 configd-20230417113253-10.2.3-h4.info
-rw-rw-rw- 1 root root 849K Apr 24 15:39 configd-20230424153852-10.2.3-h4.info
-rw-rw-rw- 1 root root  22K May  7 16:38 nodejs-20230507163854-10.2.3-h4.info
-rw-rw-rw- 1 root root 843K May 11 00:07 configd-20230511000720-10.2.3-h4.info

  • Configd.log (less mp-log configd.log) displays errors after commit.
2023-05-11 08:45:27.030 -0400 Error:  pan_cfg_tpl_update_variable_config_for_device_from_file(pan_cfg_templates.c:3458): Failed to read /opt/pancfg/mgmt/templates/template_Stack/013201031720-variable.xml, bad or does not exist on disk
2023-05-11 08:45:27.119 -0400 Error:  pan_cfg_tpl_update_variable_config_for_device_from_file(pan_cfg_templates.c:3458): Failed to read /opt/pancfg/mgmt/templates/template_Stack/013201031833-variable.xml, bad or does not exist on disk

 



Environment


  • Palo Alto M-600 Panorama
  • PAN-OS 10.2.3x, 10.2.4x
  • Partial device group push


Cause


Software Issue.

Resolution


  1. The issue is resolved under PAN-217053 in 10.2.4-h3, 10.2.5, 11.1.0 and higher versions.
  2. Upgrade to the above versions will resolve the issue.
  3. As a workaround, perform a  "full" push to  all the device Groups instead of partial/selective push.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHyaCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language