Selective push error: "Selective push is blocked since a load was performed, please perform a full push"
7031
Created On 03/29/24 10:31 AM - Last Modified 05/30/24 03:24 AM
Symptom
- Configuration loaded from config file (GUI: Panorama > Setup > Operation > Load .....)
- The following message will be seen in the GUI when opening the Commit window:
Commit Scope is unavailable when a full commit is required
- The following error message will shown when attempting to perform a selective push to any Device Group or Template without performing a full commit beforehand:
Selective push is blocked since a load was performed, please perform a full push
- The configd.log (less mp-log configd.log) file will show the following error:
+0100 Error: pan_cfg_generate_selective_push_config(src_cms/pan_cfg_sel_push.c:384): SelPush:Selective push is blocked for this template stack!
+0100 Error: pan_cfg_selective_push_single(pan_cfg_shared_policy.c:2912): SelPush: Unable to create selective push config
+0100 Error: pan_jobmgr_process_job(pan_job_mgr.c:4778): Unable to create selective push config! Aborting push!Environment
- Any Panorama
- Any PAN-OS version
Cause
- A full commit is required after performing a Load operation
- This includes "Load Panorama configuration version" or "Load named Panorama configuration snapshot".
- The Load operation can be found and verified in system logs (show log system) with the following message:
Configuration from filename.xml loaded by admin.Resolution
- Perform Full Commit
- Click on "Commit > Commit to Panorama > Commit All Changes"
- Now selective push will start working.