For details on cookie usage on our site, read our Privacy Policy
Log Processing not working
- LIVEcommunity
- Tools
- Expedition
- Expedition Discussions
- Log Processing not working
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-01-2019 05:45 AM
Greetings! My instance of Expedition (1.1.43) has stopped processing all logs. The devices detail shows the new logs. I've clicked process logs from there and it appears a job is added but the job includes zero tasks and never completes or fails. I've tried clicking the little green "play" button and get "Error processing log files". /tmp/PAN_LogCoCo.log is empty. Any suggestions of things I can look at or do to kick start this log processing issue? Thanks!
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-05-2019 06:21 AM
Unfortunately I'm not seeing the logs processed. I do not get an error now, and it appears that logs process as there are several java processes that spin up when I click the "process files" button. The jobs show failed but no clue as to why. Also a link to the error_logCoCo is included below. I haven't seen anything in there that indicates where the problem is. Any thoughts? Thanks!
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-05-2019 01:10 PM
UPDATE: I noticed a low disk space error in the log. Took care of that (Moved location of DATA ANALYSIS STRUCTURES FOLDERs). Re-processed the files and things worked as expected.
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-05-2019 01:19 PM
I encountered this error also, due to the longer time the logs weren't processed the foldersize got bigger.
I've added some additional space and relaunched the processing and all went ok.
I'm still seeing the (reduced) logfiles even if you select the "delete logs after processing"
- Expedition ML process Sumarization Rule with Network in Expedition Discussions
- some time search/replace doesnt work in Expedition in Expedition Discussions
- Expedition cannot login when not connected to network in Expedition Discussions
- Expeditions stopped accepting Syslog in Expedition Discussions
- PanOS 11 Logs not recognized via Syslog in Expedition Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
