HA queue is full (HA-queue-full) alert messages in system logs of active device

HA queue is full (HA-queue-full) alert messages in system logs of active device

16175
Created On 09/25/18 19:52 PM - Last Modified 07/14/20 02:03 AM


Symptom


  • The system logs on the Active device of an HA cluster show the following alert message: "HA queue is full".


Environment


  • HA cluster Active/Passive
  • Any PAN-OS
  • Any platform


Cause


  • In a High Availability (HA) configuration, the Active device keep synchronizing the runtime state of its Management Plane (MP) processes with the passive peer device (using HA1).
  • Sometimes, a process on passive device may experience some lag and not able to process information sent by active device fast enough. In this case, the transmit buffer queue on active device will then become full and the "HA queue if full" alert is raised.


Resolution


1.  Identify the laggy process. In the example below, the userid process is identified:

domain:

seqno:

actionflags: 0x0

type: SYSTEM

subtype: userid

config_ver: 0

time_generated:

vsys:

eventid: HA-queue-full

object:

fmt: 0

id: 0

module: general

severity: high

opaque: HA queue is full
 

 

2.  Connect to the CLI on the passive device and restart the impacted service. For example:

> debug software restart user-id
 

 

owner: nbilly



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgMCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language