topic Re: I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade. in Next-Generation Firewall Discussions

I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade.

SangHoonLee — Fri, 26 Jun 2026 00:48:12 GMT

Hello Team,

After upgrading the OS (11.1.6-h10 -> 11.1.13-h7), hint-related logs are appearing in the system logs.

I am aware of the cause. I am not using Panorama, and the log forwarding profile has "Panorama" checked as the forwarding method, with this profile applied to the policy.

However, despite having the same configuration, hint-related logs were not present in the system logs before the OS upgrade, but they started appearing after the upgrade.

Should I open a case with TAC to investigate this?

Re: I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade.

PavelK — Sun, 28 Jun 2026 22:06:13 GMT

Hello @SangHoonLee

thanks for post!

Could you have a look at this KB: High CPU use by logrcvr process and system log message "Number of hints on disk has exceeded 5000 due to log forward failures"? From your description it looks like you have Panorama log forwarding enabled despite not using Panorama to store logs. If this is the case try to disable Panorama log forwarding. This is likely a root cause. Also, this issue is not limited to Panorama. Setting log forwarding to Strata Logging Service could cause this as well.

Kind Regards

Pavel

Re: I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade.

SangHoonLee — Mon, 29 Jun 2026 00:23:23 GMT

Hello PavelK

Thank you for your response. I am already aware that turning off log transmission to Panorama resolves this issue. However, the customer is curious about the cause of this issue occurring after the OS upgrade. The configuration is the same before and after the OS operation, but Hint logs appear after the upgrade.

Thank you,

Best Regards.

Re: I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade.

PavelK — Mon, 29 Jun 2026 04:21:26 GMT

Thank you for reply @SangHoonLee

I see. Unfortunately, I am not able to answer what triggered it after this version upgrade. Software bugs are unpredictable and unless there is something mentioned in release notes (known issues / addressed issues) we as a customers can't determine it. We are back to question you asked in your original post whether you should open a TAC case. I guess TAC is the only place to go in this case.

Kind Regards

Pavel

Re: I see a log indicating that the number of hints exceeded 5,000 after the OS upgrade.

SangHoonLee — Mon, 29 Jun 2026 04:56:59 GMT

Hello PavelK,

I have uploaded the case to TAC. Thank you for your advice.

Thank you,

Best Regards.