Where is PAN User Identification Agent data stored?

[Kevin_Holleran]

Hello,

We currently utilize the User Identification Agent to send usernames to the PA's.  However, recently, the app has been locking up.  It continues to run and send information messages in the log but it does not collect usernames.  I cannot monitor the service because it is still running, just not communicating.  I'd like to write a script to monitor where the data is located, essentially grab tail of events, make sure the username log entries are showing up, or alert if one has not been seen in X amount of time.

Where is the data located?  Is it in a SQL DB?  How can I get at it?

Thank you.

Kevin

[mikand]

If you look in the GUI of the PAN-agent service you can activate a debug log with various levels.

Hopefully this can help you to track down what goes wrong?

Usually this debug log is disabled and if I recall it correctly will be overwritten each time you start the service.

[Kevin_Holleran]

Thanks.  I'll look into that.  We are upgrading the PA's soon which will alleviate this issue to my understanding (agent-less User-ID data) but to band-aid the process I was hoping to write up a python script to just monitor the log, and if I haven't seen any user updates in 5 minutes or so, just restart the service. 

I'll look into the debug.  Thanks for your help.

Kevin

[mikand]

By the way, I dont know if the builtin PAN-agent (the one running in the mgmtplane) has these debug options available (other than its own log-file whatever the name will be).

Also the built in PAN-agent, as far as I understand (but I could be wrong), is for smaller deployments (like <100 or so clients/users).