Generated, start and receive time detailed log view

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Generated, start and receive time detailed log view

L6 Presenter

Hello Guys,

 

How to interpret generated, start and receive time under the detailed log view for the particular session:

 

DT.PNG

 

Thank you,

Myky

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

start time is when the session itself (SYN packet) started

generated is when the dataplane started building a log entry

receive is when the management plane (or panorama if you're forwarding) received the log to be written in the logdb

 

 

hope this helps 🙂

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

start time is when the session itself (SYN packet) started

generated is when the dataplane started building a log entry

receive is when the management plane (or panorama if you're forwarding) received the log to be written in the logdb

 

 

hope this helps 🙂

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Nice. I guess for UDP communication the first packet received by PA will logged as a start session entry. Thanks as always

yes, for UDP it's when the first packet of a session is received 🙂

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 1 accepted solution
  • 2345 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!