No logs in the monitor > traffic tab?

[Ayush_paloalto]

Hello All,

1.) I have just installed Palo Alto 7.1 in Eve-NG, and  made two interfaces as Vwire with zone Trust and Untrust.

2.) I am able to access access everthing (e.g. internet, ping, etc.) hence policies are working fine  as I have created a policy to allow everything from Trust to Untrust.

However I am not able to see any Traffic logs in the GUI it is blank.

Kindly see the below screenshot for your reference and let me know what's the reason please.

Thanks in advance.

[hshawn]

This may sound obvious but make sure you are enabling the logging on  the security policies your traffic is hitting. you can log at session start and or sesssion end. 

[OtakarKlier]

Hello,

Also the default intra and inter zone policies do not log so you have to set them to log as well.

Regards,

[MP18]

Yes i agree with Okta.

[htawedrous]

Hello,

Does anybody got a resolution? I have the same problem with a PA in EVE-NG. Tried 2 different images. thank you

[ravisingh.z]

Same issue, logs are not showing in GUI and as well as CLI but logs are being written.

admin@PA-VM> show log traffic
Time App From Src Port Source
Rule Action To Dst Port Destination
Src User Dst User End Reason
Rule_UUid
====================================================================================================
admin@PA-VM> debug log-receiver statistics

Logging statistics
------------------------------ -----------
Log incoming rate: 1/sec
Log written rate: 1/sec
Corrupted packets: 0
Corrupted URL packets: 0
Corrupted HTTP HDR packets: 0
Corrupted HTTP HDR Insert packets: 0
Corrupted EMAIL HDR packets: 0
Logs discarded (queue full): 0
Traffic logs written: 120

[htawedrous]

I read that the VM needs to be licensed for monitoring, clustering and some other features to work. Not sure if it’s true

[ACHABROUK]

Yes the VM needs to be licensed, 

but you can still see some logs over 

Policies>security> "click on your rule" > usage 

Or-  from CLI 

> show session all 

thanks!

[SyedHyder]

did you find a solution, I have the same problem...

[SyedHyder]

Palo doesn't log on VM PAN OS without license...

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm2mCAC