How to determine if Palo Alto is fully operational after reboot

tsoftware — Wed, 18 May 2022 14:58:41 GMT

What is the best way to determine if Palo Alto is fully operational after a reboot. Currently, I am using the ability to log into the API as a gauge, but unfortunately Palo Alto is not fully available at that time.

When doing PanOS upgrades in the past, I have given it 3 additional minutes to stabilize before applying a configuration change, but with 8.1.23, this is no longer adequate. I have moved my "stabilization" time to 10 minutes and that seems to work better, but there has to be a better way.

With 8.1.23 and waiting three minutes, I can upload and install a configuration, but the commit fails with "Commit job was not queued. All daemons are not available." or thereabouts. Other actions in the past have to be retried multiple times until they succeed.

What API should I call / check to determine when it is ACTUALLY operational.

Thanks

Re: How to determine if Palo Alto is fully operational after reboot

JimmyHolland — Mon, 12 Sep 2022 11:29:31 GMT

Hi @tsoftware, have you tried this one?

https://{{host}}/api?key={{key}}&type=op&cmd=<show><chassis-ready></chassis-ready></show>

Hope that helps!

topic Re: How to determine if Palo Alto is fully operational after reboot in Automation/API Discussions

How to determine if Palo Alto is fully operational after reboot

Re: How to determine if Palo Alto is fully operational after reboot