topic Re: Web Management DOWN? in General Topics

Web Management DOWN?

ecardona — Fri, 06 Dec 2013 16:09:00 GMT

Hi,

We are trying to look at the ACC tab, but we receive "No Matching Records" in all te categories:

I tried to restart the web-management, but I received this error:

admin@PA> debug software restart management-server

Process 'mgmtsrvr' executing RESTART

Dec 06 12:35:16 Error: pan_read_full(comm_utils.c:97): srvr: fatal recv error. sock=3 err=Connection reset by peer (104)

Any ideas? Reboot the device is not an option (now),

Thanks!

Esteban

Re: Web Management DOWN?

sspringer — Fri, 06 Dec 2013 17:06:41 GMT

Hi Esteban,

The error you are receiving is normal when restarting the management server, it is indicating the management server has closed an existing socket.

The management-server should still restart, this can be confirmed by checking if the PID has changed

> show system resources | match mgmtsrvr

12043 20 0 368m 215m 10m S 2 8.6 1:06.76 mgmtsrvr

After restart PID is now 18548

> show system resources | match mgmtsrvr

18548 20 0 368m 215m 10m S 0 8.6 1:00.22 mgmtsrvr

Please note that once restarted, the management server can take some time to fully initialize.

If ACC is still showing no results, you can tail the ms.log to see if any helpful messages are printed regarding ACC report generation. Here is some example output from clicking on ACC tab. Note that 'no results entry for report job id 36' is printed, this is due to no relevant logs(i.e. URL/Threat/Data Filtering) generated in timeframe for the ACC query.

> tail follow yes mp-log ms.log

Dec 06 11:01:12 report generation started for 'top-applications-summary'

Dec 06 11:01:12 generating report for time from 1386345672 to 1386349271

Dec 06 11:01:12 report generation: query on type thsum started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: vectorization started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: sorting started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: sorting ended for 'top-attacks-acc'

Dec 06 11:01:12 report generation: query on type trsum started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: vectorization started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: sorting started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: sorting ended for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: query on type appstat started for 'top-applications-summary'

Dec 06 11:01:12 report generation: vectorization started for 'top-applications-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-applications-summary'

Dec 06 11:01:12 report generation: sorting started for 'top-applications-summary'

Dec 06 11:01:12 report generation: sorting ended for 'top-applications-summary'

Dec 06 11:01:12 report generation started for 'acc-summary'

Dec 06 11:01:12 generating report for time from 1386345672 to 1386349271

Dec 06 11:01:12 report generation: query on type appstat started for 'acc-summary'

Dec 06 11:01:12 report generation: vectorization started for 'acc-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'acc-summary'

Dec 06 11:01:12 report generation: sorting started for 'acc-summary'

Dec 06 11:01:12 report generation: sorting ended for 'acc-summary'

Dec 06 11:01:13 Error: pan_reportjobmgr_print_report(pan_report_mgr.c:2425): no results entry for report job id 36

Dec 06 11:01:13 Error: pan_mgmtop_show_report(pan_ops_common.c:1911): Unable to find report

Re: Web Management DOWN?

ecardona — Fri, 06 Dec 2013 19:00:29 GMT

Hi sspringer,

Thanks for your detailed answer.

I issued these commands, but the "tail follow yes mp-log ms.log" only shows these lines:

admin@PA> show system resources | match mgmtsrvr

1919 20 0 355m 201m 7824 S 0 5.4 0:19.00 mgmtsrvr

admin@PA> tail follow yes mp-log ms.log

Dec 06 15:52:31 report generation: sorting started for 'top-attacks-acc'

Dec 06 15:52:31 report generation: sorting ended for 'top-attacks-acc'

Dec 06 15:52:31 report generation started for 'top-data-filetype-summary'

Dec 06 15:52:31 generating report for time from 1386352351 to 1386355950

Dec 06 15:52:31 report generation: query on type threat started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: vectorization started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: pre-sort-hook started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: sorting started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: sorting ended for 'top-data-filetype-summary'

Dec 06 15:53:21 Getting authorization info for user admin succeeded.

I waited for 15 minutes, and nothing more happened,

Anything else before restart the device?

Thanks!

Esteban

Re: Web Management DOWN?

ecardona — Mon, 09 Dec 2013 21:43:11 GMT

Hi Everybody,

I found the solution.

In the policies we were log only at session start.

So, the solution was: click on the policy -> "actions" tab -> Log Setting -> check the box "Log at Session End"

Thanks to all,

Esteban