topic Re: Panorama - The Report that wouldnt end in General Topics

Panorama - The Report that wouldnt end

jhickey — Tue, 03 May 2011 11:52:53 GMT

We bought Panorama to have a platform to run reports on that wouldnt affect the load of the firewalls. I've noticed several reports will spin for ever. No matter how long I wait (I've left it for days just for fun) the report will never end. I've also tried making the criteria smaller in an effort to reduce how much processing needs to be done. Sometimes rebooting Panorama will help and the report will work for a while.

Anyone else experience this ? I have a case open.

Re: Panorama - The Report that wouldnt end

mharding — Tue, 03 May 2011 15:49:30 GMT

PAN-OS 3.1 or PAN-OS 4.0?

Re: Panorama - The Report that wouldnt end

jhickey — Tue, 03 May 2011 16:25:32 GMT

4.0.2

Re: Panorama - The Report that wouldnt end

jhickey — Wed, 04 May 2011 11:57:27 GMT

The problem had to do with the format of my query, in summary, if you want to get specific with your query and eliminate certain hosts. Do it this way.

(risk-of-app eq 5) and (addr.src in '10.0.0.0/8') and not (addr.src in '10.10.5.199/32') and not (addr.src in '10.10.5.199/32')

Now I am scheduling report groups. I wish there was a TEST Now button. As it stands you can just choose a day to run the report. (Not a day and a time, just a day). I'll hack around the CLI and see if I can do it there. I wish there was some documentation on this reporting stuff. It's important to us.

Thanks,

Justin