Important Notes:
The alphabet characters in the serial number must be all upper case. For example:
> request log-fwd-ctrl device 0000C123456 action live
scheduled a job with jobid 12
If lower case characters are used, then the following error message is returned:
> request log-fwd-ctrl device 0011c123456 action live
Server error : failed to schedule a job to do log fwd ctrl from panorama to device 0000c123456
Confirm that the device policies are set with log action forward to Panorama.
If the logging gets stuck, restart the log-receiver service with the following command:
> debug software restart log-receiver
Alternatively, restart the management server (which also restarts the log-receiver service) with the following command:
> debug software restart management-server
On PAN-OS 7.0, 7.1 and 8.0, 8.1 and above , please use the following command to restart the management server process:
> debug software restart process management-server