Hello All,
Just stumbled on this site through Mastering Palo Alto Networks book by Tom Piens. I am actually just seeing an issue on our Panorama active device not showing anything in the monitor traffic. I checked the secondary and confirm it shows current traffic and seems to be ok. Has anyone ever seen this before?
Not sure if this would help, but I ran into a similar scenario, please check out this post of mine:
'Log Collection log forwarding agent' is active but not connected - Palo Alto (bluenetsec.com)
A couple of things to try:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXACA0
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaUCAS
Hi and welcome :) Is your firewall connected to panorama and is it set as a target for logs 'request log-collector-forwarding status'