Panorama reports not available since the upgrade

[mladen.antesevic]

Hi All,

We are facing one issue for the last few months, we have no reports available since we have upgraded Panorama 11.0.4 --> 11.2.4-h7. So if we go Monitor | Reports menu we cannot select the date after our last upgrade. All the dates after the upgrade are grayed out and if you hover with the mouse, I got this info: "This date is after the maximum date". Otherwise we have our traffic logs normally available, just that we cannot see the reports. This is a screenshots how it exactly looks like:

The same reports are available if you check directly from the firewalls, but from panorama the are not available since the upgrade to 11.2.4-h7 (On Panorama we are checking under "Device Group: All".) 
Additionally what we have notice: under Device | Templates | Setup | Management | Logging and Reporting Settings | Pre-Defined Reports, we currently have our Pre-Defined Reports unchecked:

I cannot now recall our settings before the upgrade, I am thinking if maybe default behavior has changed between the major versions 11.0.x <--> 11.2.x I am trying to find the exact explanations of this option in the Panorama documentation, but unfortunately could not find some precise explanation so far. I have only found some quite similar behavior change between version 9.1.x <--> 10.1.x:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000wlPTCAY
Does somebody have some more experience with this topic, and if you can point me where this behavior is more precisely documented? My general plan is to enable Pre-Defined reports under Device | Templates | Setup | Management | Logging and Reporting Settings | Pre-Defined Reports for all my devices, but first I want to find exact documentation regarding this option and verify what are the possible side effect of enabling it? Thanks!

[ozheng · Accepted solution]

Hello @mladen.antesevic ,

The setting on the template will only affect the firewalls receiving the config change.
That setting was probably disabled as for small devices, it was having a negative impact on the system load.

Regarding the reports on Panorama, you can raise a case if the Panorama is under support.

Also you are running on -h4, it cost nothing to move to -h10 and observe if improvement or not. 

Olivier

[mladen.antesevic]

Hello @ozheng ,

Thanks for your answer, yes, exactly, this change would have affected the firewalls so left it unchecked as it is.
The solution for this issue was Panorama upgrade, we did an upgrade to 11.2.10-h3 and the issue get resolved, we can select any date for reports, everything looks OK.