topic Re: Local Log collector Runtime Status showing "Disconnected" in Panorama Discussions

Local Log collector Runtime Status showing "Disconnected"

Ankit1Singh — Wed, 18 Sep 2024 17:05:03 GMT

Hi Mates,

I want to know why Runtime status is disconnected.

Error - Log collector XXXX failed to connect to XXXXX-inter-lc in the ring

We are using Panorama as a "panorama" and "log-collectors"

Setup is " Active/Passive.

Issue : Managed Log collected Runtime status is showing disconnected and Configuration status is "in-sync" and Health Status is "Green"

Active Panorama MS.log

Set SSL SNI as 8.0.0
Error: pan_lcsa_tcp_channel_setup(src_panos/lcs_agent.XXXX): inter-logger-agent # 0/0: SSL connect retry. sslerr=2

Passive Panorama ms.log

Error: sni_ssl_servername_cb(src_cms/cms_server.XXXX): PANOS_SNI got, but no custom context configured.

Thanks in advance.

Re: Local Log collector Runtime Status showing "Disconnected"

PavelK — Thu, 19 Sep 2024 03:41:46 GMT

Hello @Ankit1Singh

could you please provide more details?

Was this working before or is it a new setup?

What version of Panorama and PAN-OS are you running?

Kind Regards

Pavel

Re: Local Log collector Runtime Status showing "Disconnected"

Ankit1Singh — Thu, 19 Sep 2024 09:11:54 GMT

Thanks .

PAN-OS 11.1.2-h2

It was working previously.

The issue started after reboot. And we did mgmt-srver restart but status is still same.

Re: Local Log collector Runtime Status showing "Disconnected"

PavelK — Sun, 22 Sep 2024 22:39:23 GMT

Hello @Ankit1Singh

thank you for reply.

The error looks like related SSL handshake. I went through release notes and could not find any known issue corresponding with this error. Since it was functional before, I can't think of anything resulting this error. Are you using custom certificate or default one?

At this point I would either try to take a packet capture to see what SSL is possibly causing the issue or open a TAC ticket.

Kind Regards

Pavel