Unable to activate AIOps for ngfw

[psreekan]

Hi,

   I'm trying to activate AIops for my home PA-440 but don't see the option. I've enabled telemetry for Americas region. The FW is running 10.1.6-h3

Anything else I'm missing ?  

[lr]

Hello @psreekan,

I saw your post and have a few recommendations for you. 

Please refer to the below-mentioned articles which will help you resolve the issue:

> Activate AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/activate.html

> AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/about

> Domains Required for AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/fqdns

> Enable Device Telemetry
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/device-telemetry/device-telemetry-configu...

> Onboard Devices to AIOps for NGFW
https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/onboard-devices.html

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*



 

[psreekan]

I don't see option to activate. I think i'll have to wait for the cortex data lake instance to be created ? I don't have CDL license

[psreekan]

the NGFW is running software version 10.1.6-h3

[svenkatarama]

@psreekan - If you are missing the "activate" button from showing up in the AIOps card on the hub, that is because you do not have the account admin role on the hub.

I see you are a Palo Alto Networks employee. Please email iad alias to request they give you this role on the hub.

[psreekan]

Thanks. I've requested access. Will try it again once I have the admin role

[psreekan]

I got this reply from IT on the case. Does it mean I need to request additional roles for my CSP account ? If so, what other roles ? I currently have Standard and BPA user. 

"We will only be able to provide Account Admin/Account Superuser role from our end.
Please check with the existing Account admin user to provide the correct roles."

[lr]

Hello @psreekan,

As per the reply from IT, there will be an existing user whose role is assigned as Account administrator you can check these details in the Access management section of your hub page. please check with the account administrator user to provide the correct role.

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
 

[psreekan]

i finally got the app activated.  dumb question, how does AIops get telemetry data from my PA-440 ? 

[lr]

Hello @psreekan,

Once the telemetry is enabled in the firewall and activate the AIOps app on the hub page, A free telemetry-only CDL will be created which will be linked to the AIOps instance and the data is sent to that CDL from the firewall through telemetry and the data from the CDL will be shown in the AIOps instance. 

 

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

[psreekan]

The AIOps instance is still not showing data although telemetry status on the firewall is successful. It's been more than 3 hours

[lr]

Hello @psreekan,

- I need the following data to help you further

Please share the following screenshots to proceed further :

1. Telemetry page screenshot from the firewall
2. Manage apps page screenshot from the hub page
3. AIOps instance page screenshot

Note: Sometimes it may take up to 24 hours for the data to be populated in the AIOps instance.

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*



 

[psreekan]

attached are telemetry, aiops instance sand manage-apps screenshots

[lr]

Hello @psreekan,

Please run the below commands in the firewall CLI and attach the screenshot of the outputs.

1. request device-telemetry collect-now
2. show device-telemetry settings
3. show device-telemetry details
4. show device-telemetry stats all

Regards,
Likith R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

[psreekan]

telemetry debug output attached