Logging randomly stops after Firewall is upgraded from PANOS version: 11.1.6 to 11.1.6-h3.

Logging randomly stops after Firewall is upgraded from PANOS version: 11.1.6 to 11.1.6-h3.

2011
Created On 06/04/25 21:09 PM - Last Modified 08/04/25 14:38 PM


Symptom


  • Logs are not seen in the monitor tab of Firewall.
  • Restarting the log receiver using `debug software restart process log-receiver` resolves the issue for for a few minutes.
  • ERROR_LOGS:
    2025-03-16 13:38:54.014 -0500 Error: pan_logrcvr_enqueue_dp_block(pan_log_receiver.c:11012): Error submitting task for rb_taskq
    2025-03-16 13:38:54.027 -0500 Error: pan_logrcvr_enqueue_dp_block(pan_log_receiver.c:11012): Error submitting task for rb_taskq
  • The comp_taskq and disk_flush_taskq in "debug log-receiver queue-stats" are stuck in deadlock. Ring buffer entries were almost exhausted. 
    > debug log-receiver queue-stats
    
    Logging statistics
    ------------------------------ -----------
    Log incoming rate: 0/sec
    Log written rate: 0/sec
    Logs discarded (queue full): 4739041
    Ring buffer entries: 4092/4096 <<<<<<<
    
    Traffic taskqs:
        comp_taskq: 64/64 <<<<<<<<<
        disk_flush_taskq: 253/256 <<<<<<<
        summary_calc_taskq: 0/64

 



Environment


  • Panorama managed Firewalls
  • PANOS version 11.1.X, 10.2.X
  • Log Forwarding


Cause


Software Issue.



Resolution


  1. The issue is addressed under PAN-285941.
  2. The following versions have the fix for this issue.
    • 11.1.11, 10.2.16, 10.2.17, 11.1.9, 11.1.7-h2, 11.1.6-h7, 10.2.13-h11, 10.2.9-h24, 10.2.10-h22 
  3. Upgrading to the hotfix or the major code will resolve the issue.
  4. For a temporary workaround contact Support.


Additional Information


  • Workaround:
    From root run the following commands:
    [root@236-101 ~]# sdb cfg.logrcvr.rb-count=1
    cfg.logrcvr.rb-count: 1
    [root@236-101 ~]# masterd logrcvr restart
    Process 'logrcvr' executing RESTART, Reason:''
    [root@236-101 ~]#

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000TNJsKAO&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail