Removing Previous Commits on Panorama which are Stuck

[tulrich]

Is there a way to clear old commits on Panorama which have never succeeded? Our firewall which we were committing to dropped off the network during that time and the commit is still pending. 

Any CLI commands to clear this other than restarting the management plane on Panorama? 

[jacobwebb]

From the command line you can run 'show jobs all'.  This will list all jobs that the Panorama has ran.  (Note:  You can also do 'show jobs pending' to show jobs that haven't been completed yet.)  You then can write down the ID of the jobs that need to be cancelled and type 'clear job id #'.  Replace the # symbol with the ID of the job you need to cancel.

Regards,
Jacob

[jacobwebb]

I should also note that this will only cancel it from the Panorama view.  You will need to cancel on the firewalls as well using the same commands.

[ksalustro]

Does not work for me. Ver 10.2.2-h2.

joe@Panorama> show jobs all | match Commit
2022/12/12 13:30:14 13:30:14 572918 CommitAll ACT OK 50 %
2022/12/12 13:00:54 13:00:54 572903 CommitAll ACT OK 50 %
2022/12/12 14:08:53 14:08:53 572922 CommitAll FIN FAIL 100 %
2022/12/12 13:30:14 13:30:14 572919 CommitAll FIN OK 100 %
2022/12/12 13:29:08 13:29:08 572906 Commit FIN OK 13:29:44
2022/12/12 13:00:54 13:00:54 572902 CommitAll FIN OK 100 %
2022/12/12 13:00:54 13:00:54 572901 CommitAll FIN OK 100 %
2022/12/12 13:00:54 13:00:54 572900 CommitAll FIN OK 100 %
2022/12/12 12:57:44 12:57:44 572888 Commit FIN OK 12:58:18
joe@Panorama> clear job id 572903

Server error : Cannot stop job 572903 at this time
joe@Panorama> clear job id 572918

Server error : Cannot stop job 572918 at this time
joe@Panorama>

[miguelMA]

why can't this be done from the gui?

seem like an easy enough that admins should be able to do

[AdriMallorqui]

Hi, any updates on this? We are experiencing the same issue.

[kiwi]

Hi @AdriMallorqui ,

Which version are you running ?

I'm not sure when exactly it was implemented but in Panorama 11.0.1 there's an option to clear the commit queue (this option wasn't available on Panorama in the initial post):

If you don't have this option in your PAN-OS version yet you can try clearing the jobID's individually in the CLI.

If none of the above work then the remaining option is to restart the management plane on Panorama.

Kind regards,

-Kim.

[AdriMallorqui]

Hi Kim @kiwi,

Thank you for your suggestions. We are currently running version 10.1.8-h2, and the option to clear the commit queue in the GUI is already there, but I did not notice that. However, I tried to clear the job through CLI, but I had the same error that @ksalustro "Server error: Cannot stop job XXXXX at this time". Nevertheless, the commit eventually failed due to a timeout after a while.

I could not try the clear option in the GUI, but I think that if it can not be cleared from the CLI, the result from the GUI might be the same unless the internal process triggered is different.

Thanks again for your help!
Adri

[JayGolf]

Hi @AdriMallorqui ,

If needed, here is a link to restarting the management process. The command also works for Panorama. 

[sbagh]

How to Clear a Hung or Pending Job from the CLI

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClhFCAS