06-20-2018 12:13 AM
It's a while since our system of 3 HA Palo Alto Firewalls stopped showing logs in Panorama.
The logs are generated and forwarded to Panorama as in next two pictures:
Panorama-receiving logs
One of FW sending logs
Traffic and Threats not visible
On one of webpages it was suggested we need additional license for wieving logs in Panorama?
licenses
Summary:
Time is synchronized on Panorama and firewalls
Reseting log receiver on Panorama doesn't help (debug software restart process management-server)
We have no clue what to do next so any help would be appreciated.
06-20-2018 04:11 AM
What version of Panorama?
How long has panorama been up?
I experienced a similar issue in 7.1.10 and was told that it was probably related to a bug. Restarting panorama fixes it for a few months at a time at my location.
06-20-2018 11:45 AM
Thanks for the answer,
As for Panorama version we have (also on all FW's we have the same softw. version):
Software Version | 7.1.16 |
Unfortunally reseting the device did not solve the problem... There is still no traffic or threat info for the last 3 months... Firewalls generate logs o.k. and are viewable directly under FW, but Panorama somehow doesn't show them...
Perhaps is there a way to clear past traffic and threat logs on Panorama? Or somehowe restart collecting logs on Panorama and start over? Any idea how to do this?
Anyone else any suggestions?
06-20-2018 12:12 PM
Have you followed this article?
06-20-2018 12:25 PM
Hello,
Also make sure the FW's and the Panorama are on the same versions. The Panorama can be a higher version but same base code.
Panorama version 8.0.9 can manage FW version 8.0.1-9 but not 8.1.0.
Hope that makes sense.
Regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!