rcent two days traffic log missing the log of DOS attack in PA220

MavioLee — Thu, 25 Aug 2022 08:57:37 GMT

before latest content, there are log from outside to outside to show which countries dos and which port they use to attack

but only threat log can show dos attack but no countries show in log

now traffic log can not find which countries dos attack

Re: rcent two days traffic log missing the log of DOS attack in PA220

nikoolayy1 — Wed, 31 Aug 2022 08:55:49 GMT

Maybe reboot the device as I have an article about how to do such steps in the article below:

https://live.paloaltonetworks.com/t5/general-topics/knowledge-sharing-restarting-palo-alto-processes-reboot-shutdown/m-p/413053#M92916

Also the geolocation database is part of the content update so if a reboot does not help then check the database with the command "show location ip <ip address> " as mentioned in the command command below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMt6CAG

You may try to again reinstall the content updates or return the old one as temp solution.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFhCAK

Also check for known issues with your version that are related to geolcation or content updates. For example here is for 10.1.6:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-6-known-and-addressed-issues/pan-os-10-1-6-known-issues

topic Re: rcent two days traffic log missing the log of DOS attack in PA220 in Next-Generation Firewall Discussions

rcent two days traffic log missing the log of DOS attack in PA220

Re: rcent two days traffic log missing the log of DOS attack in PA220