topic Re: Unable to activate AIOps for ngfw in AIOps for NGFW Discussions

Unable to activate AIOps for ngfw

psreekan — Tue, 16 Aug 2022 17:42:42 GMT

Hi,

I'm trying to activate AIops for my home PA-440 but don't see the option. I've enabled telemetry for Americas region. The FW is running 10.1.6-h3

Anything else I'm missing ?

Re: Unable to activate AIOps for ngfw

lr — Tue, 16 Aug 2022 17:51:10 GMT

Hello @psreekan,

I saw your post and have a few recommendations for you.

Please refer to the below-mentioned articles which will help you resolve the issue:

> Activate AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/activate.html

> AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/about

> Domains Required for AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/fqdns

> Enable Device Telemetry
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/device-telemetry/device-telemetry-configure/device-telemetry-enable.html

> Onboard Devices to AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/onboard-devices.html

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

Re: Unable to activate AIOps for ngfw

psreekan — Tue, 16 Aug 2022 18:14:21 GMT

I don't see option to activate. I think i'll have to wait for the cortex data lake instance to be created ? I don't have CDL license

Re: Unable to activate AIOps for ngfw

psreekan — Tue, 16 Aug 2022 18:16:10 GMT

the NGFW is running software version 10.1.6-h3

Re: Unable to activate AIOps for ngfw

svenkatarama — Tue, 16 Aug 2022 18:50:57 GMT

@psreekan - If you are missing the "activate" button from showing up in the AIOps card on the hub, that is because you do not have the account admin role on the hub.

I see you are a Palo Alto Networks employee. Please email iad alias to request they give you this role on the hub.

Re: Unable to activate AIOps for ngfw

psreekan — Tue, 16 Aug 2022 18:57:25 GMT

Thanks. I've requested access. Will try it again once I have the admin role

Re: Unable to activate AIOps for ngfw

psreekan — Wed, 17 Aug 2022 13:23:34 GMT

I got this reply from IT on the case. Does it mean I need to request additional roles for my CSP account ? If so, what other roles ? I currently have Standard and BPA user.

"We will only be able to provide Account Admin/Account Superuser role from our end.
Please check with the existing Account admin user to provide the correct roles."

Re: Unable to activate AIOps for ngfw

lr — Wed, 17 Aug 2022 17:30:27 GMT

Hello @psreekan,

As per the reply from IT, there will be an existing user whose role is assigned as Account administrator you can check these details in the Access management section of your hub page. please check with the account administrator user to provide the correct role.

Re: Unable to activate AIOps for ngfw

psreekan — Wed, 17 Aug 2022 22:18:51 GMT

i finally got the app activated. dumb question, how does AIops get telemetry data from my PA-440 ?

Re: Unable to activate AIOps for ngfw

lr — Thu, 18 Aug 2022 00:37:43 GMT

Hello @psreekan,

Once the telemetry is enabled in the firewall and activate the AIOps app on the hub page, A free telemetry-only CDL will be created which will be linked to the AIOps instance and the data is sent to that CDL from the firewall through telemetry and the data from the CDL will be shown in the AIOps instance.

Re: Unable to activate AIOps for ngfw

psreekan — Thu, 18 Aug 2022 01:46:52 GMT

The AIOps instance is still not showing data although telemetry status on the firewall is successful. It's been more than 3 hours

Re: Unable to activate AIOps for ngfw

lr — Thu, 18 Aug 2022 16:23:54 GMT

Hello @psreekan,

- I need the following data to help you further

Please share the following screenshots to proceed further :

1. Telemetry page screenshot from the firewall
2. Manage apps page screenshot from the hub page
3. AIOps instance page screenshot

Note: Sometimes it may take up to 24 hours for the data to be populated in the AIOps instance.

Re: Unable to activate AIOps for ngfw

psreekan — Thu, 18 Aug 2022 17:46:19 GMT

attached are telemetry, aiops instance sand manage-apps screenshots

Re: Unable to activate AIOps for ngfw

lr — Thu, 18 Aug 2022 20:13:20 GMT

Hello @psreekan,

Please run the below commands in the firewall CLI and attach the screenshot of the outputs.

1. request device-telemetry collect-now
2. show device-telemetry settings
3. show device-telemetry details
4. show device-telemetry stats all

Re: Unable to activate AIOps for ngfw

psreekan — Thu, 18 Aug 2022 21:12:02 GMT

telemetry debug output attached

Re: Unable to activate AIOps for ngfw

lr — Thu, 18 Aug 2022 21:34:26 GMT

Hello @psreekan,

Please wait for 3 to 4 hours and check whether the device is onboarded into the AIOps instance.

Re: Unable to activate AIOps for ngfw

psreekan — Fri, 19 Aug 2022 12:41:47 GMT

Still no luck. The NGFW doesn't show up in the AIOps instance

Re: Unable to activate AIOps for ngfw

bsd48 — Tue, 23 Aug 2022 16:24:35 GMT

We resolved the issue by adding application paloalto-device-telemetry and paloalto-iot-security to the security policy that handles management interface traffic and restarting management-server to force sending telemetry data.

Re: Unable to activate AIOps for ngfw

lr — Mon, 19 Sep 2022 16:47:07 GMT

Hello @psreekan,

The issue has been resolved from the backend please check and let me know if you are still facing the issue.