Panorama - HA - Last primary-suspended state reason: User requested

[Balram-Vakil]

Hey Guys,

I am trying to find out why would Panorama HA switch would happen. From the out of "show high-availability state" I see that the switch was requested by a user. However, I am trying to get the logs to understand which user actually requested it. I cannot see this information in Monitor > config nor on Monitor > system.

Can someone guide me in finding out the log that shows the name of the user who requested the suspension?

[S.Cantwell · Accepted solution]

Good Day

I just tried an HA failover and you are correct, there is no user tied to who issued the command.

You could best determine the log time of when the device went from active to suspended and cross-check with the admin user logged in before/during the HA event.
There would be a logical inference that this logged in user requested the action.

[Balram-Vakil]

Thanks for helping out. I did think the same. Although, I feel a simple log would have made this easier.