Help issue, wildefire dosn't upload file anymore

[Gianpiero]

Hi all

i have this little issue.We have activated wildefire on smtp to control and upload any permitted files to cloud for analysis. It started well and for a 6 days it sand files ad after malicious submissions it started to block files.

But the last 2 days it stopped the process and in log  we found only alert/forward and no more wildefire-upload.

The rules doesn't change

Can you help me pls 

Thanks for all 

[TranceforLife · Accepted solution]

Hi,

Had this before. Confirm wildfire status and check if the files are still uploaded (most likely it is):

> show wildfire status

Verify the same over the support portal:

Restart the process:

> debug software restart process vardata-receiver

more info:

https://live.paloaltonetworks.com/t5/General-Topics/WildFire-Submissions-no-logs/m-p/139070#U139070

[Gianpiero]

Thanks you it works!!!

There is a way to understand why it goes down?In wich log i can found it? i'm new with this product and i'm in lerning mode:D

Thanks again

[TranceforLife]

No unfortunately I don't know the reason for this but @BPry seing it more often so might help you

[BPry]

@Gianpiero I've never actually been able to find the root cause of why it becomes unfunctional, and I've looked at it multiple times with TAC. The best that we could ever come up with was that the process actually got stuck and failed to restart automatically. 

One thing that I would try and verify is that it was actually uploading files during this process; I've ran into an issue before that wildfire as a whole becomes unregistered from the box and you have to go through and force it to check it's registration or have the box go out to the licensing server to refresh everything. This issue I've pretty much traced back to communication issues with the update server though, so if simply restarting the process worked for you then it's likely the first one.