Differences

This shows you the differences between two versions of the page.

--- paloaltonetworks:logs:syslog:ha [2020/06/04 08:00] – bstafford
+++ paloaltonetworks:logs:syslog:ha [2022/11/23 12:49] (current) – external edit 127.0.0.1
@@ Line 2: / Line 2: @@
 ===== Critical ======
-<code>( subtype eq vpn ) and ( severity eq critical )</code>
+<code>( subtype eq ha ) and ( severity eq critical )</code>
 Panorama
 <code>( eventid eq connect-change ) and ( description contains 'HA1 connection down' )</code>
 Firewall
+<code>( eventid eq dataplane-down ) and ( description contains 'HA Group 1: Dataplane is down: too many dataplane processes exited' )</code>
+<code>( eventid eq dataplane-down ) and ( description contains 'HA Group 1: Dataplane is down: dataplane exit failure' )</code>
 <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: HA1 connection down' )</code>
 <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: Control link running on HA1-Backup connection' )</code>
@@ Line 13: / Line 15: @@
 <code>( eventid eq state-change ) and ( description contains 'HA Group 1: Moved from state Active-Secondary to state Non-Functional' )</code>
 Panorama Secondary
-<code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; staying in Passive state' )
+<code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; staying in Passive state' )</code>
 Panorama Secondary
 <code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; going to Passive state' )</code>
@@ Line 40: / Line 42: @@
 ===== High ======
-<code>( subtype eq vpn ) and ( severity eq high )</code>
+<code>( subtype eq ha ) and ( severity eq high )</code>
 <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup link down' )</code>
 <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup peer link down' )</code>
@@ Line 58: / Line 60: @@
 ===== Informational ======
-<code>( subtype eq vpn ) and ( severity eq informational )</code>
+<code>( subtype eq ha ) and ( severity eq informational )</code>
 <code>( eventid eq state-change ) and ( description contains 'Moved from state Initial to state Active' )</code>
@@ Line 88: / Line 90: @@
 <code>( eventid eq peer-version-match ) and ( description contains 'Build Release version now matches' )</code>
 <code>( eventid eq peer-version-match ) and ( description contains 'Peer device running a compatibile but different version 8.1.10' )</code>
-<code>( eventid eq peer-version-match ) and ( description contains 'Application Content version mismatch due to device update' ) [Panorama]
+Panorama
-<code>( eventid eq peer-version-match ) and ( description contains 'Application Content version now matches' ) [Panorama]
+<code>( eventid eq peer-version-match ) and ( description contains 'Application Content version mismatch due to device update' )</code>
-<code>( eventid eq peer-version-match ) and ( description contains 'Anti-Virus version mismatch due to device update' ) [Panorama]
+Panorama
-<code>( eventid eq peer-version-match ) and ( description contains 'Anti-Virus version mismatch due to device update' ) [Panorama]
+<code>( eventid eq peer-version-match ) and ( description contains 'Application Content version now matches' )</code>
+Panorama
+<code>( eventid eq peer-version-match ) and ( description contains 'Anti-Virus version mismatch due to device update' )</code>
+Panorama
+<code>( eventid eq peer-version-match ) and ( description contains 'Anti-Virus version mismatch due to device update' )</code>
 <code>( eventid eq config-not-synch ) and ( description contains 'HA Group 1: Commit on local device succeeded; configuration-synchronization disabled, running configuration not synchronized to peer' )</code>
 <code>( eventid eq preempt ) and ( description contains 'HA Group 1: Going to Active-Secondary state due to preemption' )</code>