<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic High availability system alarms in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1238823#M6330</link>
    <description>&lt;P&gt;I can't find all the HA events. I need to map all the system alerts on my FW.&lt;/P&gt;
&lt;P&gt;Searching the system logs, I find logs like the ones shown below, but I need to be able to map each one to my server to monitor alarms.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;2025/08/25 06:03:57 high ha config- 0 HA Group 1: Commit on peer device with running configuration not synchronized; synchronize manually&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Anti-Virus version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Global Protect Client Software version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Application Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Threat Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Anti-Virus version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Global Protect Client Software version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Application Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Threat Content version does not match&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;This article lists some of the alarms, but the HA ones are missing, and I'm having trouble listing them. &lt;BR /&gt;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/system-log-reference/critical-system-log-messages?utm_source=chatgpt.com" target="_blank"&gt;https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/system-log-reference/critical-system-log-messages?utm_source=chatgpt.com&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Does anyone have a resource where I can look them up?&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 25 Sep 2025 18:19:40 GMT</pubDate>
    <dc:creator>EduRamirez</dc:creator>
    <dc:date>2025-09-25T18:19:40Z</dc:date>
    <item>
      <title>High availability system alarms</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1238823#M6330</link>
      <description>&lt;P&gt;I can't find all the HA events. I need to map all the system alerts on my FW.&lt;/P&gt;
&lt;P&gt;Searching the system logs, I find logs like the ones shown below, but I need to be able to map each one to my server to monitor alarms.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;2025/08/25 06:03:57 high ha config- 0 HA Group 1: Commit on peer device with running configuration not synchronized; synchronize manually&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Anti-Virus version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Global Protect Client Software version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Application Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:02 high ha peer-ve 0 HA Group 1: Threat Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Anti-Virus version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Global Protect Client Software version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Application Content version does not match&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2025/08/25 06:04:05 high ha peer-ve 0 HA Group 1: Threat Content version does not match&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;This article lists some of the alarms, but the HA ones are missing, and I'm having trouble listing them. &lt;BR /&gt;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/system-log-reference/critical-system-log-messages?utm_source=chatgpt.com" target="_blank"&gt;https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/system-log-reference/critical-system-log-messages?utm_source=chatgpt.com&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Does anyone have a resource where I can look them up?&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 25 Sep 2025 18:19:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1238823#M6330</guid>
      <dc:creator>EduRamirez</dc:creator>
      <dc:date>2025-09-25T18:19:40Z</dc:date>
    </item>
    <item>
      <title>Re: High availability system alarms</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1238825#M6332</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/193322"&gt;@EduRamirez&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;I'm not aware of a resource where this is specifically detailed, but if you're using a normal SIEM (Graylog, Splunk, LogRythm, etc.) have their respective content packs that you can utilize&amp;nbsp; instead of having to build it out manually. If you've rolled your own maybe you can use Graylogs content pack to build out your extractors?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 25 Sep 2025 19:51:28 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1238825#M6332</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2025-09-25T19:51:28Z</dc:date>
    </item>
    <item>
      <title>Re: High availability system alarms</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1241001#M6419</link>
      <description>&lt;P&gt;Thanks!&lt;/P&gt;
&lt;P&gt;I didn´t know that. I will use it as a reference.&amp;nbsp;&lt;BR /&gt;I need this information for a customer who needs an official source of alarms and alerts.&amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 30 Oct 2025 17:09:54 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/high-availability-system-alarms/m-p/1241001#M6419</guid>
      <dc:creator>EduRamirez</dc:creator>
      <dc:date>2025-10-30T17:09:54Z</dc:date>
    </item>
  </channel>
</rss>

