topic Threat log appears to have stopped. in General Topics

Threat log appears to have stopped.

tezza — Sun, 05 May 2013 21:25:26 GMT

Has anyone seen this happening, threat logs seemed to have stopped logging new information.

Re: Threat log appears to have stopped.

mikand — Mon, 06 May 2013 08:14:54 GMT

I guess everything else is running?

If you need to have it back on track I would suggest to try to reboot just the device-server (mgmt-plane) - but if its not critical its better if you can contact the support so they can see this for themselfs before restarting any processes. There is supposed to exist a watchdog which should automagically restart crashed processes so this might be due to something else, like a db or even hdd-crash (that is partition holding the particular table which threatlogs ends up in) or such?

Re: Threat log appears to have stopped.

ymiyashita — Tue, 28 May 2013 08:23:39 GMT

"set system setting logging log-suppression no" should resolve the logging issue.

- Yasu.

Re: Threat log appears to have stopped.

gswcowboy — Wed, 10 Jul 2013 17:43:40 GMT

Related to bug id 50444. Fixed in PANOS 5.0.6. Snippet of release note:

With several threat prevention features, such as antivirus, if the same host downloaded the same virus from the same server multiple times at intervals more than five seconds apart, the threat log only showed the first download and did not show the subsequent downloads. This also occurred with file blocking and data filtering.