topic Re: inter-logger-agent message in Panorama in General Topics

inter-logger-agent message in Panorama

fl1654 — Mon, 08 Oct 2018 13:37:03 GMT

Anyone know what this message refers to, and/or suggest any steps to trouble-shoot?

The message is showing up in System log of a backup Panorama M-500 manager. X.X.X.X is the IP assigned to dedicated port on primary Panorama M-500 manager. The interface on the primary is setup for collector group communication. Running PANOS 8.1.3.

Failed to connect to inter-logger-agent # 0 Server: X.X.X.X Port: 28270 Retry: 0

--Felix

Re: inter-logger-agent message in Panorama

BPry — Tue, 09 Oct 2018 02:56:55 GMT

@fl1654,

This would generally indicate a period of network latency between the two devices. You could attempt to compress the logs and run with the logs compressed to see if that eliminates the issue. The below command would simply need to be ran on all log collectors within the collector group to make sure it takes effect. If the issue goes away, that would point toward latency issues being the route cause.

'debug log-collector inter-log-collector data-compression set on'

Re: inter-logger-agent message in Panorama

fwmike — Fri, 11 Jan 2019 19:46:38 GMT

@fl1654

It can also mean that destination TCP port 28270 is not reachable on the destination Panorama. Check the path between Panoramas for anything blocking that port.