Critical System Alerts on a PA-220

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
vanglee
L1 Bithead

Critical System Alerts on a PA-220

Hello,

We recently implemented a secondary line on our network and were testing the failover process.  Everything worked well, however, we realized that we were not alerted of the primary circuit going down or recovering.  It was confirmed when looking through the system log that the failure and recovery were reported, yet no emails was sent out. I have confirmed under Server Profiles that we have our primary email set to receive critical alerts.  None of those configurations have changed from what I know.  

 

Are there other recommendations to the process of reporting test critical system alerts? 

 

 

Rene_Boehme
L2 Linker

Hi,

 

can you please post a screenshot of your setting under Device > Log Settings? 

Can you check this article below to see if general mail function is working?

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUiCAK

 

 

Kind regards,
René
// If you like my answer force commit it.
OtakarKlier
Cyber Elite

Hello,

Also make sure that the SMTP server is accessible from either ISP.

 

Regards,

vanglee
L1 Bithead

Hi there,

 

Here's a screenshot of log setting setup. I reviewed the link provided and have confirmed we're able to get test emails. 

 

vanglee_0-1601664887370.png

 

BPry
Cyber Elite

@vanglee,

If you look at the ms.log file can you see anything saying that it can't send to one of the email addresses that you have specified? 

 

less mp-log ms.log

vanglee
L1 Bithead

Thanks for the responses so far.  I did a some more looking today and noticed that under Devices>Log Settings>Alarm Settings "Enable Alarms" and "Enable Web Alarm Notifications" were not enabled.  I went ahead and enabled and committed the changes.  

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!