Push to the device fails with error: "Device xxxxxxxxxxxx variable table has undefined values. Please use 'Get Value from Device' or define the variables first."

Push to the device fails with error: "Device xxxxxxxxxxxx variable table has undefined values. Please use 'Get Value from Device' or define the variables first."

1249
Created On 02/05/25 15:31 PM - Last Modified 07/15/25 03:10 AM


Symptom


  • Template variables are imported using a CSV file.
  • Push to the device from Panorama fails with the following error
    • "Device xxxxxxxxxxxx variable table has undefined values. Please use 'Get Value from Device' or define them first."
  • Details of the error can be seen in the configd.log (less mp-log configd.log). 
    07:12:49.208 -0800 skipping validation for node entry during selective push as required by schema
    07:12:49.214 -0800 Takes 0 seconds to verify schema.
    07:12:49.214 -0800 Clearing commit completion cache
    Writing template variable config file /opt/pancfg/mgmt/templates/VARIABLE_STK/selective-VARIABLE_STK-variable.xml.
    07:12:49.310 -0800 TPL config files generated, task_cnt=0
    07:12:49.311 -0800 commitall-files done flag set to 1
    07:12:49.311 -0800 Destructing config_vars
    07:12:49.311 -0800 Setting commitvars destruct done flag
    07:12:49.311 -0800 Done Destructing config_vars
    07:12:49.311 -0800 decrement_commit_job_config_vars done
    07:12:49.311 -0800 Error:  pan_cfg_tpl_push(pan_cfg_templates.c:4187): Device xxxxxxxxxxx variable table has undefined values, please use get value from device  or define it first


    Environment


    • Panorama with managed Firewalls
    • PAN-OS 10.2.x and above
    • Commit (Push to Devices/Commit and Push)
    • Template Variables


    Cause


    This issue occurs when importing template variables using a CSV file, which results in device-specific overridden values being excluded from the selective push scope.



    Resolution


    1. The device-overridden variable values are not included in the selective push scope.
    2. To ensure all variable values are properly applied, use "Push All Changes" instead of "Push Changes Made By" during the commit process.


    Additional Information


    Another similar article with a different symptom: Panorama commit error: Device xxxxxxxxxx variable table has undefined values, please use get value from device or define it first



    Actions
    • Print
    • Copy Link

      https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sdLQCAY&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail