https://live.paloaltonetworks.com/t5/next-generation-firewall/palo-alto-syslog-service-daemon-restart/m-p/567328#M2177 <P>Hi,</P> <P>I have three PA-7080 firewalls that have Log forwarding cards (LFC) for forwarding logs using a syslog profile. I use the "debug log-receiver statistics" command to show log statistics. In the output, I found two fields 'log incoming rate' &amp; 'log written rate'. I observed that every firewall log incoming &amp; written rate are almost the same except for one firewall. I attached a screenshot below where the log written rate is almost double.&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ssovee_0-1701152370062.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/55461iD2A700C543F25787/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="ssovee_0-1701152370062.png" alt="ssovee_0-1701152370062.png" /></span></P> <P>I am assuming that it is writing duplicate logs and forwarding them to a syslog server. Is there any way to troubleshoot this?</P> <P>Is there any way to restart the Syslog service or daemon? If possible then what will be the impact?&nbsp;</P> <P>Thank You for Any Help You May Provide...</P> Tue, 28 Nov 2023 06:25:39 GMT ssovee 2023-11-28T06:25:39Z https://live.paloaltonetworks.com/t5/next-generation-firewall/palo-alto-syslog-service-daemon-restart/m-p/567328#M2177 <P>Hi,</P> <P>I have three PA-7080 firewalls that have Log forwarding cards (LFC) for forwarding logs using a syslog profile. I use the "debug log-receiver statistics" command to show log statistics. In the output, I found two fields 'log incoming rate' &amp; 'log written rate'. I observed that every firewall log incoming &amp; written rate are almost the same except for one firewall. I attached a screenshot below where the log written rate is almost double.&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ssovee_0-1701152370062.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/55461iD2A700C543F25787/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="ssovee_0-1701152370062.png" alt="ssovee_0-1701152370062.png" /></span></P> <P>I am assuming that it is writing duplicate logs and forwarding them to a syslog server. Is there any way to troubleshoot this?</P> <P>Is there any way to restart the Syslog service or daemon? If possible then what will be the impact?&nbsp;</P> <P>Thank You for Any Help You May Provide...</P> Tue, 28 Nov 2023 06:25:39 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/palo-alto-syslog-service-daemon-restart/m-p/567328#M2177 ssovee 2023-11-28T06:25:39Z