I have the issue that imported logs from firewall on 8.1.X release can't be processed in Expedition.
I already changed the permissions of PALogs to anything possible. Also chmod 777 PALogs/.
Files are imported correctly but can't be processed at this point.
Any ideas what to try next?
Solved! Go to Solution.
you'll need to set the below permissions and ownership
$sudo chown www-data /home/expedition/PALogs
$sudo chmod +x /home/expedition/PALogs
I found the issue. It's no permission issue. I imported logs from a specific firewall into expedition. Below connected devices I had my Panorama and all other firewalls. I made the mistake to select the Panorama while trying to parse these specific firewall logs.
So basically I just needed to select the correct firewall and click on process again. After that you can create a project and jump into panorama config to use the machinelearning to improve the panorama rulebase from this specific firewall.
same issue and resolution. If you add panorama as a device under 'improted devices' you will need to remove it and add any firewalls individually (says serial number taken otherwise).
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!