Broken email notifications formatting in version 11.0.1

[nevolex]

Hi all

I noticed that email notifications in ver 11.0.1 are kind of broken from the formatting point if view they just look like a blob of text, instead of a decent formatted email in ver 10.2.4 

is there a way to fix it?

Thank you

[S.Cantwell]

Hello there, based on the </br> that shows up in the 11.0.1, I am guessing that there is a programming defect/ anomaly in how the logs are transmitted.  You "may" be able to try and create a custom email format vs using the default format that comes from the devices.

After that, a bug/ Feature Request ticket should be submitted to your local PANW SE (not the TAC) for getting this in front of engineering to fix this.  This is my recommendation.

[BPry · Accepted solution]

@nevolex,

As @S.Cantwell mentioned I would bring this up with your SE. I can tell you that mine was already aware of the issue and said that it'll likely be fixed in the next release and that some clients had already opened a TAC case about it. You can either wait for it to be fixed or customize the email format so that it's formatted properly, as that will resolve the issue. 

[jruck]

Same problem going from 10.1.8 to 10.1.10

[ericscott]

Ditto, 10.1.8 to 10.1.10

[Giovanni_Russo]

Same problem going from 10.1.8 to 10.1.10. Are there workarounds or do we have to wait for a new fix?

[IMTechSupport]

@BPry @S.Cantwell , Hello guys! I see this issue (thread) was way back in April, do you guys by chance have an update on this?
Looking at the release notes for 11.0.x, it seems that it is not yet identified as a known issue nor being addressed.

[JeffreyN]

This broke when upgrading from 10.2.4(h4) to 10.2.5 as well. Sad this is nearly 4 months old and still being broken with brand new PAN releases.

[JuanCanuelo]

Broken again in version 10.1.10-h1 and 10.1.10-h2, its a recurrent issue. HTML formatting should be avoided, its preferable some plain text or other customizable options.

[JeffreyN]

How can you customize the email format to make it formatted properly? I tried making a custom format, but it replaces backslash n (new line) with the html br forward slash tags. I tried adding an opening html tag, but this didn't work either. My SE has failed to reply to my inquiry.

[AlexNC]

I can confirm. we upgraded from 10.2.4 > 10.2.5 and it is broken now. It was working fine in 10.2.4

Seriously and what is the BugID for this?
I cannot find it under Open/Known issues for 10.2.5

UPDATE: searching within 11.0.1 Know Issues, one can find the BugID

PAN-221126

Email server profiles ( Device Server Profiles Email and Panorama Server Profiles Email ) to forward logs as email notifications are not forwarded in a readable format. Workaround: Use a Custom Log Format to forward logs as email notifications in a readable format.

I do use a custom LogFormat, but all line breaks still won't work, which makes the email not readable

When will Palo Alto finally give us a useable bug search tool, the current possibilities are just utter useless.

Also having BugIDs not published > Manual GP Gateway selection for Gateways behind NAT devices does not work. Was not published because its a duplicate of "Certificate auth not working when GP Gateway behind NAT device". Guys please why do we even bother going through release notes at all anymore?

Sorry just had to let it out. It's the second time within weeks that stuff like that happens.
So much to 10.2.5 being the holy grail of 10.2.x releases that finally fixes many issues we are facing.

[BPry]

@AlexNC,

So the bug IDs are just specific Jira issues that are entered, same for feature requests and the like. That's why you'll always here about having your SE "vote" for a FR, if you've ever used Jira that starts to make more sense. To your point directly, PAN has taken this approach that Jira is an internal resource and they don't want to grant customers access to said resource. This makes sense from a security aspect since everything is kind of in one instance.

What doesn't make any sense is that it's not hard to drive other applications with information within Jira. We do that heavily internally and I wouldn't say our developers are anywhere near top notch. PAN could easily expose FRs and bug IDs if they actually wanted to, they seemingly don't wish to spend the time required to build a portal.

Long winded way of saying I don't have an answer for you, because I've never gotten an actual answer that was satisfactory either. Exposing FRs and bug IDs so that the community at large can add votes to FRs without going through their SE, know what is already out there, and have access to relevant bug information (like the vast majority of other vendors) would be a big positive. 

[AlexNC]

I totally agree with you and also other vendors suffer the same issues with some bugs are beeing internal and some are public.

But the sheer amount of simple bugs (we're not talking high severity bugs that leave you with your pants down) are not listed. Also if there are simple..... I am talking about DEAD simple workarounds to fix an issue/bug.

I've seen my fare share of Jiira and that there is to much information put into it, that would expose the customer that actually opened the first case for a given issue 🙂
But com'on add some fields for a sanitized version. Start creating all new TAC Cases/Jiira Issues with the new mask.
higher some fresh from from school coders that automate the sanitizing of all existing Jira entries, then have a few senior TAC Engineers that know the product to review quicky and make sure no confidential information is leaked/visible.

Even if the cleanup/split is not perferct (just look at some other Vendor BugIDs with their descryption/symptoms/workaround/solution part.

BTW: Just a couple of weeks ago. I was able to take a BugID e.g PAN-221126 and add it to the general "search" bar on the top right. This way I could find all the PAN-OS Versions that the Bug is listed. This does not work anymore 😞

[AlexNC]

I found a workaround to the BugID Search within the PAN-OS Release Notes.
If you search for the BugID PAN-221126 like this, it will not show any results see below.

But if you search for PAN-221126/ > yes adding a / at the end, I do get some results back (it's more then what I want and searched for, but the first hits do show the correct releases).

[JeffreyN]

I did end up opening a TAC case. They had (as of last week) no planned fixed release for 10.2, but did state it should be fixed in 10.1.11 and 11.0.3 if you are on those trains (I'm on 10.2, unfortunately).