01-23-2026 11:43 AM
@Juliortega and @I.AguilarGomez
this can be appear, because some devices have issue to update the local WFdb .
If you are still receiving the alerts, please restart the agent services by following the command:
- Open the command prompt with administrative privileges
- Navigate to C:\Program Files\Palo Alto Networks\Traps
- Run the below command to stop the agent services
#cytool runtime stop
- Run the below command to start the agent services
#cytool runtime start
with this devices will try connect again to the tenant and get the last informations.
sometimes, we need clear agent db:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Clear-agent-datab...
