This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Krueger
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Krueger
11-04-2021
4Posts
0Likes
0Solutions
Nov 04, 2021Last Visited
User
Activity
User
Profile
Latest posts by Krueger
| Subject | Views | Posted |
|---|---|---|
| 2396 | 12-10-2019 10:44 PM | |
| 2627 | 12-09-2019 08:26 AM | |
| 2666 | 12-06-2019 10:25 AM | |
| 2742 | 12-04-2019 09:38 AM |
User Badges
Community Statistics
| Member Since | 03-25-2015 11:31 AM |
| Date Last Visited | 11-04-2021 05:40 PM |
| Posts | 4 |
12-10-2019
10:44 PM
An additional confirmation. We failed our HA pair back where Primary IP & Serial match Expedition primary and logs are processing correctly.
... View more
12-09-2019
08:26 AM
The difference between the first time and second time is which firewall in the HA pair is active vs configuration in Expedition. If the firewall configured as primary in Expedition generated the logs then everything works as expected. However, if the logs were generated by the device in HA Serial # field, then logs are process but listed as unprocessed.
Logs already processed but still listed as new
... View more
12-06-2019
10:25 AM
More detail for this issue. A fresh Expedition VM was built using New Expedition Installation Procedure.
Added Device to Expedition using Active IP & Serial. CSV's processed correctly and shows as processed.
Deleted Device in Expedition and Deleted Connections.parquet FILES.
Added Device to Expedition using Passive IP & Serial + HA Serial (currently active). CSV's are processed but still show as pending in UI
Looking in the pandbRBAC.device_logs table the logs are listed as processed with the HA Serial. It seems the logic is not working correctly to flag logs sent from the HA Serial as processed.
... View more
12-04-2019
09:38 AM
After upgrading to Expedition 1.1.50 Devices show CSV Pending after log processing completes successfully. Additionally, Apache Spark URL does not appear on the M. Learning tab Processing status bar when Spark is processing the CSV. Also the grey message bar always displays: The '/PALogs/NTXIRT00-IG0?-H_traffic_*' cannot be accessed. '
Finally, Once log processing completes the Traffic tab displays traffic for the log that was imported however Devices shows the CSV is still pending
.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-04-2021
05:40 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks