Web Management DOWN?

[ecardona]

Hi,

We are trying to look at the ACC tab, but we receive  "No Matching Records" in all te categories:

I tried to restart the web-management, but I received this error:

admin@PA> debug software restart management-server

Process 'mgmtsrvr' executing RESTART

Dec 06 12:35:16 Error: pan_read_full(comm_utils.c:97): srvr: fatal recv error. sock=3 err=Connection reset by peer (104)

Any ideas? Reboot the device is not an option (now),

Thanks!

Esteban

[sspringer]

Hi Esteban,

The error you are receiving is normal when restarting the management server, it is indicating the management server has closed an existing socket.

The management-server should still restart, this can be confirmed by checking if the PID has changed

> show system resources | match mgmtsrvr

12043      20  0  368m 215m  10m S    2  8.6  1:06.76 mgmtsrvr

After restart PID is now 18548

> show system resources | match mgmtsrvr

18548       20   0  368m 215m  10m S    0  8.6   1:00.22 mgmtsrvr

Please note that once restarted, the management server can take some time to fully initialize.

If ACC is still showing no results, you can tail the ms.log to see if any helpful messages are printed regarding ACC report generation. Here is some example output from clicking on ACC tab. Note that 'no results entry for report job id 36' is printed, this is due to no relevant logs(i.e. URL/Threat/Data Filtering) generated in timeframe for the ACC query.

> tail follow yes mp-log ms.log

Dec 06 11:01:12 report generation started for 'top-applications-summary'

Dec 06 11:01:12 generating report for time from 1386345672 to 1386349271

Dec 06 11:01:12 report generation: query on type thsum started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: vectorization started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: sorting started for 'top-attacks-acc'

Dec 06 11:01:12 report generation: sorting ended for 'top-attacks-acc'

Dec 06 11:01:12 report generation: query on type trsum started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: vectorization started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: sorting started for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: sorting ended for 'top-url-categories-summary'

Dec 06 11:01:12 report generation: query on type appstat started for 'top-applications-summary'

Dec 06 11:01:12 report generation: vectorization started for 'top-applications-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'top-applications-summary'

Dec 06 11:01:12 report generation: sorting started for 'top-applications-summary'

Dec 06 11:01:12 report generation: sorting ended for 'top-applications-summary'

Dec 06 11:01:12 report generation started for 'acc-summary'

Dec 06 11:01:12 generating report for time from 1386345672 to 1386349271

Dec 06 11:01:12 report generation: query on type appstat started for 'acc-summary'

Dec 06 11:01:12 report generation: vectorization started for 'acc-summary'

Dec 06 11:01:12 report generation: pre-sort-hook started for 'acc-summary'

Dec 06 11:01:12 report generation: sorting started for 'acc-summary'

Dec 06 11:01:12 report generation: sorting ended for 'acc-summary'

Dec 06 11:01:13 Error: pan_reportjobmgr_print_report(pan_report_mgr.c:2425): no results entry for report job id 36

Dec 06 11:01:13 Error: pan_mgmtop_show_report(pan_ops_common.c:1911): Unable to find report

[ecardona]

Hi sspringer,

Thanks for your detailed answer.

I issued these commands, but the "tail follow yes mp-log ms.log" only shows these lines:

admin@PA> show system resources | match mgmtsrvr

1919       20   0  355m 201m 7824 S    0  5.4   0:19.00 mgmtsrvr          

admin@PA> tail follow yes mp-log ms.log

Dec 06 15:52:31 report generation: sorting started for 'top-attacks-acc'

Dec 06 15:52:31 report generation: sorting ended for 'top-attacks-acc'

Dec 06 15:52:31 report generation started for 'top-data-filetype-summary'

Dec 06 15:52:31 generating report for time from 1386352351 to 1386355950

Dec 06 15:52:31 report generation: query on type threat started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: vectorization started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: pre-sort-hook started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: sorting started for 'top-data-filetype-summary'

Dec 06 15:52:31 report generation: sorting ended for 'top-data-filetype-summary'

Dec 06 15:53:21 Getting authorization info for user admin succeeded.

I waited for 15 minutes, and nothing more happened,

Anything else before restart the device?

Thanks!

Esteban

[ecardona · Accepted solution]

Hi Everybody,

I found the solution.

In the policies we were log only at session start.

So, the solution was: click on the policy -> "actions" tab -> Log Setting -> check the box  "Log at Session End"

Thanks to all,

Esteban