Removing Previous Commits on Panorama which are Stuck

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Removing Previous Commits on Panorama which are Stuck

L0 Member

Is there a way to clear old commits on Panorama which have never succeeded? Our firewall which we were committing to dropped off the network during that time and the commit is still pending. 

 

Any CLI commands to clear this other than restarting the management plane on Panorama? 

 

Stuck_Commit.JPG

8 REPLIES 8

L0 Member

From the command line you can run 'show jobs all'.  This will list all jobs that the Panorama has ran.  (Note:  You can also do 'show jobs pending' to show jobs that haven't been completed yet.)  You then can write down the ID of the jobs that need to be cancelled and type 'clear job id #'.  Replace the # symbol with the ID of the job you need to cancel.

 

Regards,
Jacob

I should also note that this will only cancel it from the Panorama view.  You will need to cancel on the firewalls as well using the same commands.

L3 Networker

Does not work for me. Ver 10.2.2-h2.

 

joe@Panorama> show jobs all | match Commit
2022/12/12 13:30:14 13:30:14 572918 CommitAll ACT OK 50 %
2022/12/12 13:00:54 13:00:54 572903 CommitAll ACT OK 50 %
2022/12/12 14:08:53 14:08:53 572922 CommitAll FIN FAIL 100 %
2022/12/12 13:30:14 13:30:14 572919 CommitAll FIN OK 100 %
2022/12/12 13:29:08 13:29:08 572906 Commit FIN OK 13:29:44
2022/12/12 13:00:54 13:00:54 572902 CommitAll FIN OK 100 %
2022/12/12 13:00:54 13:00:54 572901 CommitAll FIN OK 100 %
2022/12/12 13:00:54 13:00:54 572900 CommitAll FIN OK 100 %
2022/12/12 12:57:44 12:57:44 572888 Commit FIN OK 12:58:18
joe@Panorama> clear job id 572903

Server error : Cannot stop job 572903 at this time
joe@Panorama> clear job id 572918

Server error : Cannot stop job 572918 at this time
joe@Panorama>

L2 Linker

why can't this be done from the gui?

seem like an easy enough that admins should be able to do

L0 Member

Hi, any updates on this? We are experiencing the same issue.

Community Team Member

Hi @AdriMallorqui ,

 

Which version are you running ?

 

I'm not sure when exactly it was implemented but in Panorama 11.0.1 there's an option to clear the commit queue (this option wasn't available on Panorama in the initial post):

kiwi_0-1695103170669.png

 

If you don't have this option in your PAN-OS version yet you can try clearing the jobID's individually in the CLI.

 

If none of the above work then the remaining option is to restart the management plane on Panorama.

 

Kind regards,

-Kim.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Hi Kim @kiwi,

Thank you for your suggestions. We are currently running version 10.1.8-h2, and the option to clear the commit queue in the GUI is already there, but I did not notice that. However, I tried to clear the job through CLI, but I had the same error that @ksalustro "Server error: Cannot stop job XXXXX at this time". Nevertheless, the commit eventually failed due to a timeout after a while.

 

I could not try the clear option in the GUI, but I think that if it can not be cleared from the CLI, the result from the GUI might be the same unless the internal process triggered is different.

Thanks again for your help!
Adri

Community Team Member

Hi @AdriMallorqui ,

 

If needed, here is a link to restarting the management process. The command also works for Panorama. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
  • 7164 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!