Get Correlation ID of an operation (Activity) performed on an Azure-hosted CNGFW, via the Azure portal

Collect the Correlation ID of an operation performed on an Azure-hosted CNGFW. This Correlation ID can be used by PANW TAC to conduct troubleshooting on the backend. 

• Azure-hosted CNGFW

• Azure portal

• Log into your Azure portal

• Search for, and open, the page for your CNGFW:

• Unless done already, perform the requisite Activity; for this demonstration, this would be simply deploying a new Azure-hosted CNGFW,

• Click on “Activity log”,

• Locate the log entry for the Activity performed (important: ensure the filters have been set correctly, especially if the Activity has been performed a while back, otherwise the initial search may not result in the log for the concerned Activity):

• Click on the Activity; this will lead to a new pane that contains information pertaining to the Activity; in this pane, click on “JSON”:

• Locate the Correlation ID (the value in the “correlationId” field) in the JSON output; this can be done by scrolling down manually or by searching for it using your browser’s search functionality:

• Copy the value of the “correlationId” field; this will be the Correlation ID you can provide to TAC; alternatively, you can copy the JSON in its entirety and save it in a JSON file or a plaintext file.

• Update the concerned TAC case with the Correlation ID and / or the JSON file.