PAN-OS 10.1 no Wildfire Submissions logs in WebGUI

[RudolfTorvenyi1]

Hi, 

I made upgrade on PA-220 to PAN-OS 10.1.0. After that the Wildfire Submission logs are not loaded in WebGUI. I only see the rotating progress circle in the upper right corner.

In CLI the Wildfire logs are visible 

>show log wildfire

Of course I have opened a support case. Just asking if anybody has the same issue and came up with a solution 😉

Rudolf

[nikoolayy1]

Why would you upgrade to a not stable version like 10.1 that just came out be a test guinea pig for it?

I suggest never doing and waiting for atleast 3 months and upgrading then as there will be many fixes to such issues in releases for example like 10.1.3 etc.

I don't see this to be a known issue as seen in the known issues only PAN-134053.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-0-known-and-addressed...

Have you tested the wildfire submission and connection?

https://docs.paloaltonetworks.com/wildfire/10-1/wildfire-admin/submit-files-for-wildfire-analysis/ve...

[RudolfTorvenyi1]

Hi Nikolay. Wrong description. Not me, but my customer made the upgrade 🙂 .Of course I would not do that on a FW under "my control". 

But some customers are very curious :). 

[nikoolayy1]

Ah I was support for many customers in the previous company so I get your pain. As a final option for them to use the latest 10.0.x like 10.0.6 if nothing helps? Maybe return to the old version and if needed upgrade to 10.0.6.

[BPry]

@RudolfTorvenyi1,

Good reminder for the customer that they shouldn't be jumping into brand-new releases I guess 😉 

For what it's worth, I just looked at this on one of my lab PA-220s and I'm not experiencing the same issue after upgrading to 10.1.0. You could have them try re-installing the same release and see if that fixes the issue; or you could do what I would likely do and use it as an excuse to have them back the upgrade off of their (assuming production) firewall. 

[RudolfTorvenyi1]

Hi BPry, the reinstall didn't help. I have opened a case and will see how it goes. This is not a critical issue and the customer is fine with that. To have loyal "early adopter" customers is sometimes good :). 

[RudolfTorvenyi1]

I had a remote session with TAC and surprisingly it worked :D. The support technician told me that it takes some time after upgrade to work correctly 😕

[Joshan_Lakhani]

@BPry @RudolfTorvenyi1 

Iam also facing the same issue did you get any response from Paloalto TAC team,

@nikoolayy1 

As this bug id is not match with current issue

[BPry]

@Joshan_Lakhani,

@RudolfTorvenyi1 mentioned in his last comment that it took a bit to start logging properly post upgrade, so maybe you are in the same situation. Personally I haven't ran into this issue on any of my LAB devices. I actually just upgraded a handful of non-critical PA-220s to 10.1.2 and didn't experience any logging issues running through validation checks afterwards, so I'm not sure how widespread this particular logging delay actually is.