<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: system logs in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226626#M65232</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Hmmm... are they active passive or active active... could they have failed over without you realising. And you have lost a HA data link?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;perhaps HA2.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 09 Aug 2018 17:37:03 GMT</pubDate>
    <dc:creator>Mick_Ball</dc:creator>
    <dc:date>2018-08-09T17:37:03Z</dc:date>
    <item>
      <title>system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226512#M65210</link>
      <description>&lt;P&gt;Don't seem to be updating&lt;/P&gt;</description>
      <pubDate>Wed, 08 Aug 2018 20:24:39 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226512#M65210</guid>
      <dc:creator>jdprovine</dc:creator>
      <dc:date>2018-08-08T20:24:39Z</dc:date>
    </item>
    <item>
      <title>Re: system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226607#M65228</link>
      <description>&lt;P&gt;Well actually they don't seem to be updating on my primary palo alto in the GUI but seem to be working fine on the secondary&lt;/P&gt;</description>
      <pubDate>Thu, 09 Aug 2018 15:22:13 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226607#M65228</guid>
      <dc:creator>jdprovine</dc:creator>
      <dc:date>2018-08-09T15:22:13Z</dc:date>
    </item>
    <item>
      <title>Re: system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226626#M65232</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Hmmm... are they active passive or active active... could they have failed over without you realising. And you have lost a HA data link?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;perhaps HA2.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Aug 2018 17:37:03 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226626#M65232</guid>
      <dc:creator>Mick_Ball</dc:creator>
      <dc:date>2018-08-09T17:37:03Z</dc:date>
    </item>
    <item>
      <title>Re: system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226651#M65238</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/18719"&gt;@jdprovine&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;I'm going to go with&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/9981"&gt;@Mick_Ball&lt;/a&gt;'s suggestion that they probably failed over. From prior conversations I&amp;nbsp;&lt;EM&gt;think&lt;/EM&gt; you use active/passive; so I'm guessing that Mick is right and the member that is usually active has in fact failed traffic over to the peer.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Aug 2018 19:38:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226651#M65238</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2018-08-09T19:38:42Z</dc:date>
    </item>
    <item>
      <title>Re: system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226670#M65251</link>
      <description>&lt;P&gt;Perhaps&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/18719"&gt;@jdprovine&lt;/a&gt;&amp;nbsp;you could confirm if this is the system or traffic logs...&lt;/P&gt;&lt;P&gt;the discussion mentions system.....&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;if it is the system log then cancel my idea on the H2 data link as the system log should still contain local stuff to that device..&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;or... do you use a generic login for administration and you or someone else has left a null return filter in the search bar.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;i hate it when that happens, annoying thing is... its usually me...&lt;/P&gt;</description>
      <pubDate>Fri, 10 Aug 2018 06:22:22 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226670#M65251</guid>
      <dc:creator>Mick_Ball</dc:creator>
      <dc:date>2018-08-10T06:22:22Z</dc:date>
    </item>
    <item>
      <title>Re: system logs</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226708#M65264</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/9981"&gt;@Mick_Ball&lt;/a&gt;&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480"&gt;@BPry&lt;/a&gt;&lt;/P&gt;&lt;P&gt;I would have responded back yesterday but I kept getting a saml error when trying to login.&amp;nbsp; The fix was to restatrt the management server, not sure what happened but everything was working as it should it just wasn't being reported inthe system logs correctly, but it was working on our passive firewall weird&lt;/P&gt;</description>
      <pubDate>Fri, 10 Aug 2018 12:14:37 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/system-logs/m-p/226708#M65264</guid>
      <dc:creator>jdprovine</dc:creator>
      <dc:date>2018-08-10T12:14:37Z</dc:date>
    </item>
  </channel>
</rss>

