Failed to send file device telemetry file _1-hr-interval_HOUR.tgz

[jim.smith]

I'm wondering if anyone else is seeing failures during the uploading of telemetry files today?

Our first failure occurred at 10:38 PDT and has been reoccurring every hour since.

I see via https://status.paloaltonetworks.com/, that wildfire is in maintenance... related?

[BKern]

Didn't want you to feel like it was just you @jim.smith. I had telemetry send failures today as well. Started at 10:04 PDT with the last system error at 16:04 PDT. Cleared up on it's own. I filtered the system log on "send-failed" and found a similar episode on 3/29 that cleared on it's own as well. Guessing you're right. Some sort of backend system maintenance or issue.

[RoneyRajan123]

Hi

Guys, same alert today i have seen one of my customer as well, any updates on this.

@BKern @jim.smith 

[kunal.shahasuno]

PA-460-PRI - SYSTEM ALERT : critical : Failed to send: file 'PA_023001007706_dt_10.1.6-h6_202302...

domain: 1
receive_time: 2023/02/21 12:48:05
serial: 023001007706
seqno: 7168396259220261798
actionflags: 0x0
type: SYSTEM
subtype: device-telemetry
config_ver: 2561
time_generated: 2023/02/21 12:48:06
high_res_timestamp: 2023-02-21T12:48:06.367+05:30
dg_hier_level_1: 0
dg_hier_level_2: 0
dg_hier_level_3: 0
dg_hier_level_4: 0
vsys_name:
device_name: PA-460-PRI
vsys_id: 0
vsys:
eventid: send-failed
object:
fmt: 0
id: 0
module: general
severity: critical
opaque: Failed to send: file 'PA_023001007706_dt_10.1.6-h6_20230221_0200_1-hr-interval_HOUR.tgz'.
dg_id: 0
tpl_id: 0

[kunal.shahasuno]

can any one know what this error is?

[clewis1]

We have started to see these errors too. Not sure the cause

[mimran]

If you have disabled telemetry and still seeing this system alert, probably you are hitting PAN-207390.

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-4-known-and-addressed...

If it is enabled and you are seeing this error then need to check what device_telemetry logs are saying.

This can also be happening if there is any device in between performing decryption, if so exempt the traffic from SSL decryption.

If you are using service route then in policy we have to allow device_telemetry so that the file can be sent.