Failed to Send Email Reports

[SubaMuthuram]

Hi Team,

We have configured, Email Scheduler for the Daily report, We are tested the email severs communication and the email scheduler communication also fine. 

But we are not receiving the report, We are receiving the below error in system logs,

" Failed to email PDF reports to 'xxxx@xxx.com' for email profile Administrator " 

Please help me with the issue. 

NGFW. 

[PavelK]

Thank you for the post @SubaMuthuram

If email test as well as scheduler test are successful, then as a next step, I would look into logs. Could you run this from CLI to see it can provide mode details what the issue is: tail lines 200 mp-log ms.log

Kind Regards

Pavel 

[BPry]

@SubaMuthuram,

If you're going to look at the ms.log as @PavelK mentioned I would recommend only running that command if you know your scheduler should have emailed you a report recently. 200 lines on the ms.log file doesn't account for much depending on your firewall, there's a number of features that use this file and a number of them can get quite talkative in the ms.log file. 

I'd honestly start with the basics here. The test email simply verifies that the settings are correct and you can send an email, but it doesn't include attachments or anything of the sort. I'd personally just try generating the report manually or pulling it from the firewall's report history. Attach that PDF to an email and send it via the account your using on the firewall to the mailbox in question. You could find that the attachment is too large, the attachment type is restricted, or something else is preventing this email from being delivered properly.

Additionally in the system logs are you seeing any mail send errors (description contains 'mail send')? You should be seeing a number of attach file found messages, but it'll also show you errors in the operation if they exist. 

[SubaMuthuram]

Hi, @BPry ,

Thanks for the suggestion, Is there a way we generate a report from Report Group or how can I export all the reports mentioned in a Report. 

Regards,

Suba J  

[SubaMuthuram]

Hi, 

I have found this error in system logs,

mail send: attach file found:/tmp/pdf-email-schedulerJHabmF/1-20220102Daily_Reports.pdf

Also I have found mail client logs I have found the below,

2022-01-03 17:07:46.402 +0530 smtp.office365.com
2022-01-03 17:07:48.430 +0530 Error: maillog(smtpclient_lib.c:315): attach file found:/tmp/pdf-email-schedulerJHabmF/1-20220102Daily_Reports.pdf
2022-01-03 17:07:59.172 +0530 Error: getMsgBody(smtpclient_lib.c:865): caption 1-20220102Daily_Reports.pdf file /tmp/pdf-email-schedulerJHabmF/1-20220102Daily_Reports.pdf
2022-01-03 17:09:37.502 +0530 Error: pan_smtp_fn(smtpclient_lib.c:1667): curl_easy_perform() failed: Timeout was reached
2022-01-03 17:09:37.503 +0530 Error: maillog(smtpclient_lib.c:315): curl_easy_perform() failed: Timeout was reached

Any thoughts on this. 

[SubaMuthuram]

Hi, 

I have found one strange thing here, The customer has many reports in a single report group, When I configured single report in a scheduler we are receiving report. 

[SubaMuthuram · Accepted solution]

Hi, 

I have found the solution, When I add only one report, I am receiving the reports So it is no of reports added is the issue. So is there any particular numbers can include in a report group. 

[BPry]

@SubaMuthuram,

2022-01-03 17:09:37.502 +0530 Error: pan_smtp_fn(smtpclient_lib.c:1667): curl_easy_perform() failed: Timeout was reached
2022-01-03 17:09:37.503 +0530 Error: maillog(smtpclient_lib.c:315): curl_easy_perform() failed: Timeout was reached

By default O365 accounts are only able to accept an email up to 25MB and up to 150MB depending on how the account is setup. I would verify that those reports attempting to be attached aren't reaching the max size for the mailbox. 

[SubaMuthuram]

Hi @BPry,

Agreed, is there anyway where we can see the size of the Report file in palo alto  ?

[BPry]

@SubaMuthuram,

Under Monitor -> Reports you have the option to view past reports that the firewall has generated by clicking on the report and the date on the right hand side of the screen. This doesn't directly display the report size, but it will give you the option to export the report to whatever format you are utilizing and see what the report size is. 

[psoto88]

Hi!

We have the same problem, several files are sent, it is not a problem of size, it seems to us that it is the number of views and reports added to the group, but there is no information on how many reports and views a group can have for sending emails.