Dynamic Address Group (DAG) Panorama plugin_aws_ret.log showing ERROR: : Dup IP exists in tag DB

Dynamic Address Group (DAG) Panorama plugin_aws_ret.log showing ERROR: : Dup IP exists in tag DB

378
Created On 02/02/26 09:12 AM - Last Modified 06/24/26 16:57 PM


Symptom


Receiving the log "ERROR: : Dup IP X.X.X.X exists in tag DB" is a false positive duplicate error in the plugin log file plugin_aws_ret.log (DAG configuration).

admin@Panorama> less plugins-log plugin_aws_ret.log

2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 10.23.54.19 exists in tag DB
2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 34.144.83.11 exists in tag DB
2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 10.34.245.28 exists in tag DB


Environment


  • Panorama
  • PAN-OS 11.0 and above
  • AWS Plugin


Cause


The log entry "ERROR: : Dup IP X.X.X.X exists in tag DB" is a misleading duplicate warning. The plugin first reads predefined and user-defined tags at the `NetworkInterface` level for an EC2 instance and writes the corresponding IP‑tag mappings to the database. It then processes predefined and user tags at the instance level and appends these tags to the IP addresses already created from the `NetworkInterfaces` section. During this second step, the plugin checks whether an IP address is already present in the database before adding the instance‑level tags, and this check triggers the duplicate error message even though the entry is not actually a true duplicate.



Resolution


Fixed in AWS Plugin versions 5.5.0 & 6.0.4

Please refer to : PLUG-22211



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000oM9pKAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail