Unable to upgrade Panorama to 11.1.4-H1

[MAerre]

Hello,

i'm stuck while upgrading panorama to 11.1.4-H1, to be honest, every next release after 11.1.2-H4 (that is my current version) is showing the following errors:

2024/10/01 14:33:17 14:33:17 4802617 SWInstall FIN FAIL 14:33:21
Warnings:

Details:Failed to install 11.1.2-h9 with the following errors.
SW version is 11.1.2-h9
Nothing pending to cancel
Error: Traceback (most recent call last):
File "/opt/panrepo/releases/11.1.2-h9/validate", line 357, in <module>
(min([dts['min'] for dts in log_type_intv_dir.values() if dts['min']]).strftime('%Y-%m-%d'),
ValueError: min() arg is an empty sequence

Failed to install version 11.1.2-h9 type cms

</result></response>

in the logs below you see 11.1.2-h9, but it happens with every release to the 11.1.4-H1 icluded

i don't know how to fix this issue, i tried both on cli and gui, furthermore, 11.1.4-H1 is the version needed to fix this bug PAN-257615, which is not alllowing me to see any logs from panorama after upgrading from 10.2.8.

Do you have any tips?

Thank you

[jpomachagua]

Hello @MAerre 

The issue has already been identified, and a fix will be applied in the upcoming release of version 11.1.5, scheduled for 10/10.

Regards

[MAerre]

Hi @jpomachagua,

i checked the release update but i'm still not able to see the 11.1.5.

Do you know when it will be scheduled?

I'm still stuck with the upgrade.

Thank you

Regards

[jpomachagua]

Hello @MAerre 

The release has been postponed to 17/10.

Regards

[RodyDeLaRosa]

Hi, we are going through this same nightmare. Where did you find reference to the 11.1.5 version? We had to downgrade back to 11.0.4-h2 and now have no Panorama logs because elasticsearch keeps restarting in a loop.

[RodyDeLaRosa]

Palo Alto has a solution for the elastic search problem, reach out to TAC, Esteban Carvajal was especially helpful, and his professionalism was top notch if you have problems with elasticsearch and logs. It turns out the problem for elastic search only arises when DOWNGRADING from 11.1.* to 11.0.*, 10.2.* or 10.1.*

To identify if it is the same issue preventing logs from populating in Panorama after downgrading Panorama software version, run the following command: "show system software status | match elasticsearch"

It will return: "Process elasticsearch running (pid: <####>)" Then run the same command again, if the pid # changes then it is the same issue described. Reach out to TAC and let them know you need them to root in to fix the elasticsearch restart loop.