topic Re: Log BrokerVM license has expired. in Cortex XDR Discussions

Log BrokerVM license has expired.

Jitaphon — Wed, 28 Dec 2022 07:30:18 GMT

We receive an alert Management Audit Log: Broker VM XXXXXXXX license has expired - Deactivating applet XXXX.

I'm not sure about this log, someone please help suggest us.

Re: Log BrokerVM license has expired.

neelrohit — Wed, 28 Dec 2022 07:50:22 GMT

This is possible if one of Cortex XDR licenses must have expired. There are some applets which require Cortex XDR Pro Per TB license to run. For example, All the collector applets, like syslog collector, kafka collector, db collector, file and folder collector, netflow collector, etc, are not available without Pro Per TB license and as a result if your license has expired, so will the applet. Please check you Cortex XDR License window.

Please feel free to "Accept as Solution" for this answer if it does.

Regards.

Re: Log BrokerVM license has expired.

Jitaphon — Wed, 28 Dec 2022 08:07:31 GMT

Thank you @neelrohit

On Cortex XDR License window, it hasn't expired. And we have Cortex XDR Pro Endpoint license.

I'm not sure, why on Management Audit showing this logs.

Re: Log BrokerVM license has expired.

neelrohit — Wed, 28 Dec 2022 08:10:17 GMT

Hi @Jitaphon ,

Thank you for writing back and responding on this!

Did we have any PoC for Pro Per TB before you might have had collector applets before? If not, can you check if there are any applets you were using that got deactivated automatically?

If none of the above is the case, we would request you to kindly open a support case with Palo Alto Networks support for the same.

Regards.