| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| paloaltonetworks:logs:syslog:ha [2020/06/04 08:01] – bstafford | paloaltonetworks:logs:syslog:ha [2022/11/23 12:49] (current) – external edit 127.0.0.1 |
|---|
| |
| ===== Critical ====== | ===== Critical ====== |
| <code>( subtype eq vpn ) and ( severity eq critical )</code> | <code>( subtype eq ha ) and ( severity eq critical )</code> |
| Panorama | Panorama |
| <code>( eventid eq connect-change ) and ( description contains 'HA1 connection down' )</code> | <code>( eventid eq connect-change ) and ( description contains 'HA1 connection down' )</code> |
| Firewall | Firewall |
| | <code>( eventid eq dataplane-down ) and ( description contains 'HA Group 1: Dataplane is down: too many dataplane processes exited' )</code> |
| | <code>( eventid eq dataplane-down ) and ( description contains 'HA Group 1: Dataplane is down: dataplane exit failure' )</code> |
| <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: HA1 connection down' )</code> | <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: HA1 connection down' )</code> |
| <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: Control link running on HA1-Backup connection' )</code> | <code>( eventid eq connect-change ) and ( description contains 'HA Group 1: Control link running on HA1-Backup connection' )</code> |
| <code>( eventid eq state-change ) and ( description contains 'HA Group 1: Moved from state Active-Secondary to state Non-Functional' )</code> | <code>( eventid eq state-change ) and ( description contains 'HA Group 1: Moved from state Active-Secondary to state Non-Functional' )</code> |
| Panorama Secondary | Panorama Secondary |
| <code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; staying in Passive state' ) | <code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; staying in Passive state' )</code> |
| Panorama Secondary | Panorama Secondary |
| <code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; going to Passive state' )</code> | <code>( eventid eq state-override ) and ( description contains 'HA peer determined to be Active through managed devices; going to Passive state' )</code> |
| |
| ===== High ====== | ===== High ====== |
| <code>( subtype eq vpn ) and ( severity eq high )</code> | <code>( subtype eq ha ) and ( severity eq high )</code> |
| <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup link down' )</code> | <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup link down' )</code> |
| <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup peer link down' )</code> | <code>( eventid eq ha1-link-change ) and ( description contains 'HA1-Backup peer link down' )</code> |
| |
| ===== Informational ====== | ===== Informational ====== |
| <code>( subtype eq vpn ) and ( severity eq informational )</code> | <code>( subtype eq ha ) and ( severity eq informational )</code> |
| |
| <code>( eventid eq state-change ) and ( description contains 'Moved from state Initial to state Active' )</code> | <code>( eventid eq state-change ) and ( description contains 'Moved from state Initial to state Active' )</code> |
