Monitor tab empty

[mpgioia]

PANOS 8.0.0

Definitely forwarding and policies working.

But monitor tab simply empty.. restart did nothing.

?

[TranceforLife]

VM? Licensed? 

[mpgioia]

VM yes.

Licensed.

[TranceforLife]

Just for the test override default policies and log the session at start and end:

[mpgioia]

Did so.  No difference... 😕

[TranceforLife]

> show session all

Can you see the sessions? 

[mpgioia]

Yep. 

[TranceforLife]

Back to the deployment. Where and how do you run your VM? Did you follow the deployment guide? I believe you got support so raise the TAC case.

[mpgioia]

It's been working all along.  All I did was add some security profiles.

I don't think it's the appliance deployment that makes a difference.

And when I revoke the policy changes.. the monitor tab remains empty..

[mpgioia]

Does it help that I mention it's in a HA pair.

And if I reboot primary and secondary takes over, it's monitor tab shows session and logging just fine ?

Only to revert back to primary.. where it stops again. 😕

[jdelio]

Being in an HA Pair matters only to show that your policy has nothing to do if you are logging or not.  Which is always great to know for troubleshooting steps.

If 1 member is not logging, then there must be an issue with the logging/storing the logs. 

I would >show system disk-space and make sure that you are not running out of space first:

> show system disk-space

Filesystem  Size Used Avail Use% Mounted on
/dev/sda2   3.8G 2.2G 1.5G  59% /
/dev/sda5   7.6G 2.8G 4.5G  38% /opt/pancfg
/dev/sda6   3.8G 2.2G 1.5G  60% /opt/panrepo
tmpfs       2.0G 1.9G 195M  91% /dev/shm
/dev/sda8   17G  8.3G 7.8G  52% /opt/panlogs

Then if you are still unsure what the issue, and you have already restarted the unit/management server process, then there may be an issue with the logging database, in which case you will need to contact support and get their assistance.

[mpgioia]

Not disk space....

Amazing... oh well.. I'll contact support.  Thanks all !

[TranceforLife]

Please can you get back with the findings.

[mpgioia]

Implicitly.. yes.

Also not a time thing.. box is sync'd with NTP..

I guess it's a forwarder process or a busted DB table somewhere...

Stay tuned all.

[mpgioia · Accepted solution]

lol... Cache/cookies/browser/client-side issue.

Flushing content saw it come up fine.. How interesting.