Log BrokerVM license has expired.

[Jitaphon]

We receive an alert Management Audit Log: Broker VM XXXXXXXX license has expired - Deactivating applet XXXX.

I'm not sure about this log, someone please help suggest us.

Cortex XDR 

[neelrohit]

Hi @Jitaphon ,

This is possible if one of Cortex XDR licenses must have expired. There are some applets which require Cortex XDR Pro Per TB license to run. For example, All the collector applets, like syslog collector, kafka collector, db collector, file and folder collector, netflow collector, etc, are not available without Pro Per TB license and as a result if your license has expired, so will the applet. Please check you Cortex XDR License window.

Please feel free to "Accept as Solution" for this answer if it does.

Regards.

[Jitaphon]

Thank you @neelrohit 

On Cortex XDR License window, it hasn't expired. And we have Cortex XDR Pro Endpoint license.

I'm not sure, why on Management Audit showing this logs.

[neelrohit]

Hi @Jitaphon ,

Thank you for writing back and responding on this!

Did we have any PoC for Pro Per TB before you might have had collector applets before? If not, can you check if there are any applets you were using that got deactivated automatically?

If none of the above is the case, we would request you to kindly open a support case with Palo Alto Networks support for the same.

Regards.