topic Panorama stop showing logs suddenly in General Topics

Panorama stop showing logs suddenly

soporteseguridad — Wed, 11 Apr 2018 13:26:56 GMT

Hi,

We have a panorama M100. Panorama is showing logs but suddenly stop doing it. We can not see any logs until we restart logd proccess or appliance. Panorama version is 8.0.8

Why is this happening?

Re: Panorama stop showing logs suddenly

rds-r2d2 — Mon, 09 Jul 2018 14:04:17 GMT

We upgraded Panorama to 8.0.11 last week and today suddenly we cannot see any logs. And all traffic on the ACC just dropped to Zero. Tried restarting logd - debug software restart process logd but still nothing.

Re: Panorama stop showing logs suddenly

rds-r2d2 — Mon, 09 Jul 2018 14:28:04 GMT

Seems to have started working again after restarting the management plane.

Re: Panorama stop showing logs suddenly

hshawn — Mon, 09 Jul 2018 14:36:10 GMT

I this is normal, after doing the upgrade it will reformat the logs and play catchup for a while since it had to reboot. with older releases it seemed to recover quicker but I have noticed with the 8.x releases I am seeing around 15-20 minutes after it comes back up the logs start showing up again. It may also depend on the amount of logging you have being throw at it

Re: Panorama stop showing logs suddenly

rds-r2d2 — Mon, 09 Jul 2018 14:40:48 GMT

In our case it's been working ok after the upgrade for about 5 days then suddently stopped working.

Re: Panorama stop showing logs suddenly

hshawn — Mon, 09 Jul 2018 14:46:02 GMT

ok, I have not seen that, maybe just a DP crash? I will keep an eye on ours

Re: Panorama stop showing logs suddenly

BPry — Mon, 09 Jul 2018 17:27:08 GMT

@rds-r2d2,

I would upgrade to 8.0.11-h1 as you can. Could you potentially be running in this;

PAN-99380:

Fixed an issue where the dataplane stopped responding when a tunnel interface on the firewall received fragmented packets.

Re: Panorama stop showing logs suddenly

rds-r2d2 — Mon, 09 Jul 2018 20:49:15 GMT

@BPry

The issue we are having is just on Panorama and it's purely a logging issue. Firewalls were operating normally on 8.0.7 and we are not running any VPN's.

Re: Panorama stop showing logs suddenly

Adriano_R94 — Fri, 09 Dec 2022 18:29:32 GMT

I have the same problem but in the overview in version 10.1.8, just after running the command debug software restart process logd.
Does anyone know the root cause of this problem and a permanent solution?

Re: Panorama stop showing logs suddenly

nikoolayy1 — Sun, 08 Jan 2023 08:56:01 GMT

This seems like a bug that causes crashes or/and memory leaks and till it is fixed maybe you can run a script using tools like Ansible or XSOAR to periodically restart the process or the managment plane:

https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_op_module.html

https://xsoar.pan.dev/docs/reference/integrations/panorama