ML Learning Discovery: Connectors stuck on loading

[zGomez]

Hi,

I have defined collectors in my project enable M learning for a rule, when I hit discovery i am unable to select a connector it seems to be stuck on Loading.

See attacked screenshot.  I already tried rebooting the machine, restarting processes, remove/re-create the collectors.

RAM/CPU DISK usage all are ok.

Any help on this would be appreciated.

[lychiang]

Hi @zGomez  Have you add log connector by going to "Plug-In" , click on the "+" sign to add a log connector, depends on the config , if it's panorama config, you will add panorama device and select the device group where you want to enable for M. Learning.  Please refer to the guide below:

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attach...

Also , if you prefer tutorial videos, you can watch the tutorial video via below link:

https://www.youtube.com/playlist?list=PLD6FJ8WNiIqXAfspousboWn6AllrOWVMi

[zGomez]

Hi Lychiang,

Yes i did define collectors under the Plug-In. 

If you do not define a collector you get an error message no collector selected.  Now it seems to be hanging on something.

It worked before.  I am processing more logs don't now if this can be related.

But the logs are all in processed status.

[zGomez]

Hi Lychiang,

You have an idea on how to troubleshoot this?

[lychiang]

@zGomez What version of the expedition you are running ?  Also is the serial # of the firewall in the traffic log you processed match the serial # of the firewall you selected in the log connector.  Is there live connectivity to Panorama ? 

[zGomez]

Hi Lychian,

I am using version 1.2.19.  The serial number matches the log connector.  I have added panorama using the API key so there is a live connectivity. 

[lychiang]

Could you try to upgrade to the latest version v1.2.22 , we have some fixed related retrieving config from panorama device in this release 

[zGomez]

Hi Lychiang,

Tnx already! Unfortunately it did not fix the problem.

[lychiang]

@zGomez Please check serial# listed in your traffic log , and in the log connector, only selected the one firewall that matching the serial# , I seen you selected two firewalls. 

[zGomez]

@lychiang :  this is active passive firewall cluster that is why I selected 2.  I tried with one I still have the same issue.
Loading windows hanging.