Panorama fails to send logs to syslog with error "Cannot assign requested address"

• Panorama is configured to send logs to syslog server
• The logs are not seen in syslog server. Panorama fails to send these logs to syslog server 
• Logd.log (less mp-log logd.log) displays error message " Error: _pan_set_bind_addr(pan_syslog.c:770): syslog: failed in bind. sock=1024 port=514 family=2 bindlen=16 err=99 (Cannot assign requested address)"
• CLI command "debug log-collector log-collection-stats show log-forwarding-stats" indicate traffic not being sent but being dropped.
  • Syslog sent count: 0
  • Syslog dropped count: 87150182

• Panorama
• PAN-OS 11.1
• Log Forwarding
• Syslog

• Panorama uses the management IP to forward logs to syslog server
• This management IP is used as source IP.
• Panorama is using old Incorrect source IP address thereby causing the connection to syslog server to fail.

Update the Panorama Source IP address to the current management IP address by using the steps listed below.

1. First, verify the current settings for the syslogng-params configuration, specifically noting the current value of src-ipaddr.

> show system state filter cfg.syslogng-params*

(Expected output example: Note the bolded line for src-ipaddr)

{ 'all-conns': prefer, 'crl': skip, 'dns_cache_expire': 0x1e, ..., 'ocsp': skip, 'so-keepalive': yes, 'src-ipaddr': 10.x.x.x, 'src-ipv6addr': unknown, 'src-keep-alive': yes, ... }

2. Attempt to Reset to Default

Attempt to resolve the issue by resetting the syslog-params to their factory(Retrieved value) default settings.

> debug syslog-params reset-to-default-settings

After executing the reset command, commit the changes:

> commit

3. Verify Default Settings

Check the configuration again to confirm that the parameters, including src-ipaddr, have reverted to their default values.

> show system state filter cfg.syslogng-params*

4. If the issue persists or the desired configuration is not achieved after the default reset, proceed to open Support case.