Dataplane under severe load

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Dataplane under severe load

L2 Linker

We are getting this message in system logs.


"Dataplane under severe load."



Community Team Member



Not a lot of info to work with ...


Have you tried checking the actual load on the device ? Was there a spike or is this constant ?

Try running an ACC report on the timeframe when you saw this message and try to identify what application is causing the load or where it is originating from.  Are there any core-file present on the system ?


In some cases this can be expected when your device is reaching it's limitation and you want to consider an upgrade.  However, sometimes this can be related to an attack in which case you are advised to configure zone protection and add DoS policy.




LIVEcommunity team member, CISSP
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Cyber Elite
Cyber Elite



you have enabled the option "Enable Log on High DP load". This will spawn log entries each time the dataplane has high CPU usage:


What is "Enable Log on High DP Load"


you can verify the daplane usage from the CLI by issuing this command:


> show running resource-monitor 

Resource monitoring sampling data (per second):

CPU load sampling by group:
flow_lookup                    :     0%
flow_fastpath                  :     0%
flow_slowpath                  :     0%
flow_forwarding                :     0%
flow_mgmt                      :     0%
flow_ctrl                      :     0%
nac_result                     :     0%
flow_np                        :     0%
dfa_result                     :     0%
module_internal                :     0%
aho_result                     :     0%
zip_result                     :     0%
pktlog_forwarding              :     0%
lwm                            :     0%
flow_host                      :     0%

CPU load (%) during last 60 seconds:
core   0   1   2   3   4   5
       0   0   0   0   0   0
       0   0   0   0   0   0
       0   0   0   0   0   0
       0   0   0   0   0   0
       0   0   0   0   0   0
       0   0   0   0   0   0
Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

"Enable Log on High DP load" is really bad name for this checkbox 🙂

It should be "Write Log entry on High DP load" or something similar.

Before explaining most people think "Enable Log on High DP load" means "Keep on logging even if DP load is high".

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!