inter-logger-agent message in Panorama

[fl1654]

Anyone know what this message refers to, and/or suggest any steps to trouble-shoot?

The message is showing up in System log of a backup Panorama M-500 manager.  X.X.X.X is the IP assigned to dedicated port on primary Panorama M-500 manager.  The interface on the primary is setup for collector group communication.  Running PANOS 8.1.3.

Failed to connect to inter-logger-agent # 0 Server: X.X.X.X Port: 28270 Retry: 0

--Felix

[BPry]

@fl1654,

This would generally indicate a period of network latency between the two devices. You could attempt to compress the logs and run with the logs compressed to see if that eliminates the issue. The below command would simply need to be ran on all log collectors within the collector group to make sure it takes effect. If the issue goes away, that would point toward latency issues being the route cause. 

'debug log-collector inter-log-collector data-compression set on'

[fwmike]

@fl1654

It can also mean that destination TCP port 28270 is not reachable on the destination Panorama. Check the path between Panoramas for anything blocking that port.