Agent upgrade status

[trondk]

Hi!

I`m running ESM 4-1-3 and are currently upgrading my clients.

Where can I find more information about the status of my Action.

It currently says "Applied on: 81; Delivered: 2; Failed: 7"

The 81 I get, but what does Delivered 2 mean and where do I find more info to correct the Failed 7?

Thx!

[efrancis · Accepted solution]

-Trondk

Applied on: 81; Delivered: 2; Failed: 7

Delivered: 2-- This means that the action was delivered to 2 of the 81 endpoints the action was applied to. When you created the rule, 81 machines checked in, had an action waiting for them, and started processing that action. 2 of the 81 have not sent back a final status for processing the action.

Failed: 7-- Similar to the above, except 7 have sent back failed status for the action.

To view the machines that failed, use the monitoring tab, and filter by versions. The 4.1.3 machines should stand out. You can troubleshoot the failed action, or open a support case->collect and send agent logs (to support case), and Palo Alto support can assist.

[trondk]

efrancis! 

Thanks for clarifying.

I would like to do as much of this research my self. Learning by doing 🙂

Could you point me in the direction of logfile or how to obtain logfiles for more troubleshooting?

[efrancis]

You can create a one time action from the ESM, or on the agent side, open the console and choose 'Send support file' You can then retrieve the log, from the monitoring tab, under data retrieval.