Logging randomly stops after Firewall is upgraded from PANOS version: 11.1.6 to 11.1.6-h3.
2011
Created On 06/04/25 21:09 PM - Last Modified 08/04/25 14:38 PM
Symptom
- Logs are not seen in the monitor tab of Firewall.
- Restarting the log receiver using `debug software restart process log-receiver` resolves the issue for for a few minutes.
- ERROR_LOGS:
2025-03-16 13:38:54.014 -0500 Error: pan_logrcvr_enqueue_dp_block(pan_log_receiver.c:11012): Error submitting task for rb_taskq 2025-03-16 13:38:54.027 -0500 Error: pan_logrcvr_enqueue_dp_block(pan_log_receiver.c:11012): Error submitting task for rb_taskq - The comp_taskq and disk_flush_taskq in "debug log-receiver queue-stats" are stuck in deadlock. Ring buffer entries were almost exhausted.
> debug log-receiver queue-stats Logging statistics ------------------------------ ----------- Log incoming rate: 0/sec Log written rate: 0/sec Logs discarded (queue full): 4739041 Ring buffer entries: 4092/4096 <<<<<<< Traffic taskqs: comp_taskq: 64/64 <<<<<<<<< disk_flush_taskq: 253/256 <<<<<<< summary_calc_taskq: 0/64
Environment
- Panorama managed Firewalls
- PANOS version 11.1.X, 10.2.X
- Log Forwarding
Cause
Software Issue.
Resolution
- The issue is addressed under PAN-285941.
- The following versions have the fix for this issue.
- Upgrading to the hotfix or the major code will resolve the issue.
- For a temporary workaround contact Support.
Additional Information
- Workaround:
From root run the following commands:[root@236-101 ~]# sdb cfg.logrcvr.rb-count=1 cfg.logrcvr.rb-count: 1 [root@236-101 ~]# masterd logrcvr restart Process 'logrcvr' executing RESTART, Reason:'' [root@236-101 ~]#