Unable to activate AIOps for ngfw

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unable to activate AIOps for ngfw

L2 Linker

Hi,

   I'm trying to activate AIops for my home PA-440 but don't see the option. I've enabled telemetry for Americas region. The FW is running 10.1.6-h3

Anything else I'm missing ?  

1 accepted solution

Accepted Solutions

Hello @psreekan,
 

The issue has been resolved from the backend please check and let me know if you are still facing the issue.

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*


 

View solution in original post

18 REPLIES 18

L3 Networker

Hello @psreekan,

I saw your post and have a few recommendations for you. 

 

Please refer to the below-mentioned articles which will help you resolve the issue:

 

> Activate AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/activate.html

 

> AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/about

 

> Domains Required for AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/fqdns

 

> Enable Device Telemetry
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/device-telemetry/device-telemetry-configu...

 

> Onboard Devices to AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/onboard-devices.html

 

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*



 

I don't see option to activate. I think i'll have to wait for the cortex data lake instance to be created ? I don't have CDL license

L2 Linker

the NGFW is running software version 10.1.6-h3

@psreekan - If you are missing the "activate" button from showing up in the AIOps card on the hub, that is because you do not have the account admin role on the hub.

 

I see you are a Palo Alto Networks employee. Please email iad alias to request they give you this role on the hub.

Thanks. I've requested access. Will try it again once I have the admin role

L2 Linker

I got this reply from IT on the case. Does it mean I need to request additional roles for my CSP account ? If so, what other roles ? I currently have Standard and BPA user. 

 

"We will only be able to provide Account Admin/Account Superuser role from our end.
Please check with the existing Account admin user to provide the correct roles."

L3 Networker

Hello @psreekan,

 

As per the reply from IT, there will be an existing user whose role is assigned as Account administrator you can check these details in the Access management section of your hub page. please check with the account administrator user to provide the correct role.

 

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
 

 

L2 Linker

i finally got the app activated.  dumb question, how does AIops get telemetry data from my PA-440 ? 

L3 Networker

Hello @psreekan,

 

Once the telemetry is enabled in the firewall and activate the AIOps app on the hub page, A free telemetry-only CDL will be created which will be linked to the AIOps instance and the data is sent to that CDL from the firewall through telemetry and the data from the CDL will be shown in the AIOps instance. 

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

The AIOps instance is still not showing data although telemetry status on the firewall is successful. It's been more than 3 hours

Hello @psreekan,

 

- I need the following data to help you further

 

Please share the following screenshots to proceed further :

 

1. Telemetry page screenshot from the firewall
2. Manage apps page screenshot from the hub page
3. AIOps instance page screenshot

 

Note: Sometimes it may take up to 24 hours for the data to be populated in the AIOps instance.


Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*



 

L2 Linker

attached are telemetry, aiops instance sand manage-apps screenshots

Hello @psreekan,

 

Please run the below commands in the firewall CLI and attach the screenshot of the outputs.

1. request device-telemetry collect-now
2. show device-telemetry settings
3. show device-telemetry details
4. show device-telemetry stats all

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

L2 Linker

telemetry debug output attached

  • 1 accepted solution
  • 12254 Views
  • 18 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!