Dynamic Address Group (DAG) Panorama plugin_aws_ret.log showing ERROR: : Dup IP exists in tag DB
Symptom
Receiving the log "ERROR: : Dup IP X.X.X.X exists in tag DB" is a false positive duplicate error in the plugin log file plugin_aws_ret.log (DAG configuration).
admin@Panorama> less plugins-log plugin_aws_ret.log
2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 10.23.54.19 exists in tag DB
2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 34.144.83.11 exists in tag DB
2026-01-06 15:47:44.480 -0800 ERROR: : Dup IP 10.34.245.28 exists in tag DBEnvironment
- Panorama
- PAN-OS 11.0 and above
- AWS Plugin
Cause
The log entry "ERROR: : Dup IP X.X.X.X exists in tag DB" is a misleading duplicate warning. The plugin first reads predefined and user-defined tags at the `NetworkInterface` level for an EC2 instance and writes the corresponding IP‑tag mappings to the database. It then processes predefined and user tags at the instance level and appends these tags to the IP addresses already created from the `NetworkInterfaces` section. During this second step, the plugin checks whether an IP address is already present in the database before adding the instance‑level tags, and this check triggers the duplicate error message even though the entry is not actually a true duplicate.
Resolution
Fixed in AWS Plugin versions 5.5.0 & 6.0.4
Please refer to : PLUG-22211