topic Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'. in AIOps for NGFW Discussions

Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

Javed.K — Wed, 12 Apr 2023 04:21:48 GMT

Hi Live Community,

I've set up AIOps for NGFW Free in our setting. I then added 20 firewalls to the AIOps dashboard after that.

This critical alert comes via email every hour. File "PA_XXXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz" could not be sent.

Does anyone know why I'm receiving this alert or have any experience with this problem?

Regards

SJK

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

RodyDeLaRosa — Tue, 22 Aug 2023 14:33:15 GMT

I have this exact same issue, no luck looking through documentation.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

svenkatarama — Tue, 22 Aug 2023 15:25:26 GMT

This message is generated from the firewall/Panorama (serial number xxxxx in the filename) when it can't send telemetry data to the AIOps in the cloud. Several deployment glitches can cause this - network connectivity, expired certificate, etc.

Did this show up just now, or was this an issue always? Suggest checking Setup>Management>Telemetry on the PAN-OS UI, to see if additional error messages are shown there that might help narrow down the problem.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

RodyDeLaRosa — Tue, 22 Aug 2023 17:37:02 GMT

Thank you so much for this detailed and quick response! I greatly appreciate it. This issue is on a PA-440, it was sending telemetry data completely fine for 2 days, this was back at the end of June. The error message is "CDL Receiver Key Empty". We use the free version of AiOps, from my understanding CDL/Logging-service license is not necessary.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

Schneur_Feldman — Fri, 15 Sep 2023 17:36:27 GMT

How did you get your PA to be in Dark Mode???

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

RodyDeLaRosa — Mon, 02 Oct 2023 14:47:16 GMT

I use an Edge extension.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

RodyDeLaRosa — Mon, 23 Oct 2023 14:42:30 GMT

called "Dark Reader"

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

kaymorrison — Tue, 24 Oct 2023 00:30:10 GMT

When you create a free instance of AIOPs, a free version of CDL is created. Check in the Hub, under the Support Account View > Settings > Manage Apps. Here is where info about the CDL instance is provided.

If you could let us know what that says, hopefully we can narrow down the problem.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

RodyDeLaRosa — Tue, 24 Oct 2023 20:42:56 GMT

Thank you, Kaymorrison. I had no idea we had access to this! Our instance did not have a name. I wonder if this may be related to the issue. The instance name was just empty, looks like no one has ever accessed it.

Re: Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

kaymorrison — Tue, 24 Oct 2023 21:19:39 GMT

Your CDL instance? Not sure what you're referring to.