Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
07-28-2021 09:46 PM
Hi All,
Does PAN offer a basic guide to troubleshooting using the tech support file e.g. which logs show what information etc?
07-29-2021 07:57 PM
PAN doesn't publish anything for end-users that goes over the tech support bundle. It's one of the things that you either learn from poking around the files or slowly work out through reviewing KB articles as you work through issues. I've never seen a non-internal document that actually lays out log file usage.
07-28-2021 09:53 PM
Hi @Ben-Price
Most hardware firewalls consist of a management plane and one or multiple dataplanes. Smaller platforms and VM-Series firewalls only have a management plane that runs the dataplane processes. Some larger platforms have an additional control plane, and Panorama does not have a dataplane. The below article may be of help to illustrate which daemons are responsible for which processes and corresponding daemon logs can be looked at.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLUeCAO
For smaller platform firewall and VM-series, daemon/process logs (both MP and DP) can be found in /var/log/pan directory.
For larger platforms (having separate DP and MP) MP logs can be found in /var/log/pan directory and DP logs in /opt directory.
07-29-2021 04:09 PM
Thanks @ahandoo, that will be useful. So there is no official guide from Palo Alto you are aware of?
07-29-2021 07:57 PM
PAN doesn't publish anything for end-users that goes over the tech support bundle. It's one of the things that you either learn from poking around the files or slowly work out through reviewing KB articles as you work through issues. I've never seen a non-internal document that actually lays out log file usage.
07-29-2021 08:56 PM
OK thanks @BPry . Do you know if they supply anything to ASCs?
07-30-2021 05:28 AM
Hi @Ben-Price, I am not sure about any document provided to the ASCs surrounding this, however, ASCs normally go through the EDU-220 (Basic config related) and EDU-330 (Advance t-shoot; Intructor-led) training which would help them build their understanding for troubleshooting.
EDU-330: The Palo Alto Networks Firewall 10.1: Troubleshooting
https://www.youtube.com/watch?v=cQy-09bg2IA
08-01-2021 04:37 PM
Thanks @ahandoo, I have my EDU-330 training coming up in a couple of weeks. It doesn't look like PAN provides any docs around this though.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
