SYSTEM ALERT : critical : fail to integrate the update of registered ip addresses since 61 seconds

[kalyanram.piratla]

Greetings

I am not sure if anyone has come across this alert SYSTEM ALERT : critical : fail to integrate the update of registered ip addresses since 61 seconds  on a regular basis?  If yes, can someone please shed some light on what is causing this issue?

When this alert was seen for the first time, I went on to restart the user-id agent as the alert was coming in from the User-ID which did not fix the problem.  Raised this as a case and it was noted as a bug and subsequently restarting the User-ID process resolved the issue after upgrading to PAN-OS 6.1.10.  It was down to out-of-sync condition between the device server and the User-ID process.

Unfortunately, these alerts are back again on 6.1.10 and restarting the user-id process stops the alerts but are back again when the PA's failover.  Restarting the user-id process again after the failover stops the alerts.

Not sure why this is the case, so wondered if anyone has to share some valuable knowledge on this.

Many Thanks 

[kiwi]

Hi,

I've seen similar cases of the same behaviour on PAN-OS 6.1.10.

If this is reproducable at will then I'd recommend that you open a case with TAC and collect the useridd logs, devsrv logs as well as files under /opt/pancfg/mgmt/global/regip (or just provide the TSF ... it should have all said files).

You might want to increase debug level of both user-id and device-server.

Hope it helps !

-Kim.

[CGibbons]

I saw the same critical errors after migrating a pair of firewalls into Panorama this morning (PANOS 8.0.8). Restarting the user-id process via

> debug software restart process user-id

made the errors go away.