| Where Can I Use
This? | What Do I Need? |
The WildFire appliance operates a series of
internal applications to manage and coordinate processing of sample
data. These applications and their requisite statuses are shown
when viewing the status of a WildFire appliance cluster.
The
following list shows the cluster components, purpose, and status
conditions:
| Name | Description | Possible Status Conditions | Definition |
global-db-service | This application database
is used to store WildFire analysis data. | AcquiringSessionSpinLock | Waiting for the session spin lock until acquiring
the lock or timeout. |
Bootstrapping | The sample database application is currently
in a bootstrapping state. |
BootstrappingNoMeet | The local sample database service started without
forming a cluster with other WildFire appliances. |
FailedToBecomeWorker | Failed to join the cluster as a worker node. |
FailedToBootstrap | The bootstrapping process has failed. |
FailedToJoinCluster | Failed to join the cluster. |
FailedToStartServices | Internal database services failed to start. |
MaintenanceDecommission | Starting decommission process for database
services. |
MaintenanceDecommissionDone | Database service has been decommissioned. |
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. |
MaintenanceFailed | Service failover has failed. |
MaintenanceFailoverDone | Service failover is done. |
MaintenanceRecoverFromSplitbrain | If the WildFire appliance is currently in split-brain
mode, the database service state will be set to MaintenanceRecoverFromSplitbrain
upon the start of the service. |
MaintenanceSuspend | The database service is in the process of
being suspended as a result of the user issuing one of the following
commands: debug cluster suspend or request cluster decommission. |
MaintenanceSuspendDone | The database service has completed the suspension
process. |
DataMigration | The contents of the local database is being merged
with the primary database. This occurs when a WildFire appliance
joins a cluster. |
DataMigrationDone | The data migration process is complete. |
DataMigrationFailed | The data migration process has failed. |
JoinedCluster | The local database service has joined the cluster. |
Ready | The database service is in a ready state. |
ReadyLeader | The database service is in a ready state
and the appliance is set as the leader. |
ReadyStandalone | The database service is in a ready state
and the appliance is operating as a standalone appliance. |
Splitbrain | A split-brain condition has been detected
and the database services has entered split-brain mode. The service
will transition to ReadyStandalone shortly. |
StandbyAsWorker | The worker node database service is in a standby
state. |
WaitingforLeaderReady | The local node is waiting to join the leader node. |
| Name | Description | Possible Status Conditions | Definition |
global-queue-service | Handles the management and prioritization
of samples sent for WildFire analysis. | Bootstrapping | Queuing service application is currently
in a bootstrapping state. |
FailedToBecomeWorker | Failed to join the cluster as a worker node. |
FailedToBootstrap | The bootstrapping process has failed. |
FailedToJoinCluster | Failed to join the cluster. |
FailedToStartServices | Internal queuing services failed to start. |
MaintenanceDecommission | Starting decommission process for queuing
services. |
MaintenanceDecommissionDone | Queuing service has been decommissioned. |
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. |
MaintenanceFailed | Service failover has failed. |
MaintenanceFailoverDone | Service failover is done. |
MaintenanceRecoverFromSplitbrain | If the WildFire appliance is currently in split-brain
mode, the queuing service state will be set to |
MaintenanceSuspend | The queuing service is in the process of
being suspended as a result of the user issuing one of the following
commands: debug cluster suspend or request cluster decommission. |
MaintenanceSuspendDone | The queuing service has completed the suspension
process. |
JoinedCluster | The queuing service has joined the cluster. |
Ready | The queuing service is in a ready state. |
ReadyLeader | The queuing service is in a ready state
and the appliance is set as the leader. |
ReadyStandalone | The queuing service is in a ready state
and the appliance is operating as a standalone appliance. |
Splitbrain | A split-brain condition has been detected
and the queuing services has entered split-brain mode. The service
will transition to ReadyStandalone shortly. |
StandbyAsWorker | The worker node queuing service is in a standby
state. |
| Name | Description | Possible Status Conditions | Definition |
siggen-db | Generates WildFire private signatures
and analysis samples. | DatabaseFailover | When HA failover occurs, the passive controller
becomes the active controller. The signature service in the passive
controller becomes the primary and the state is set to DatabaseFailover. |
DatabaseFailoverFaild | The signature database failover has failed. |
DataMigration | The contents of the local signature database
is being merged with the primary database. This occurs when a WildFire appliance
joins a cluster. |
DataMigrationDone | The data migration process is complete. |
DataMigrationFailed | The data migration process has failed. |
Deregistered | Signature database service has been deregistered. |
MaintenanceDecommission | Starting decommission process for signature
database services. |
MaintenanceDecommissionDone | Queuing service has been decommissioned. |
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. |
MaintenanceFailoverDone | Service failover is done. |
MaintenanceSuspend | The signature database service is in the process
of being suspended as a result of the user issuing one of the following commands:
debug cluster suspend or request cluster decommission. |
MaintenanceSuspendDone | The signature database service has completed
the suspension process. |
MigrateMalwareDatabase | When upgrading PAN-OS from
version 7.1 to 8.0, the sample data is converted to a different format.
These states indicate the progress of the data migration process. |
MigrateSiggenDatabaseStage1 |
MigrateSiggenDatabaseStage2 |
MigrateSiggenDatabaseStage3 |
Ready | The signature database service is in a ready
state. |
ReadyMaster | The signature database service is in primary
mode and is operating on the active controller. |
ReadySlave | The signature database service is in backup
mode and is operating on the passive controller. |
ReadyStandalone | The signature database service is in a ready
state and the appliance is operating as a standalone appliance. |
Splitbrain | A split-brain condition has been detected
and the signature database service has entered split-brain mode.
The service will transition to ReadyStandalone shortly. |
Stopped | The signature database service has stopped
on the appliance. |
| Name | Description | Possible Status Conditions | Definition |
wildfire-management-service | WildFire work mode management service. | Running | The WildFire management service is in an operational state. |
Done | The WildFire management service has finished
running. |
| Name | Description | Possible Status Conditions | Definition |
wildfire-apps-service | WildFire infrastructure applications. | Deregistered | The WildFire applications service has been
deregistered. |
Ready | The WildFire applications service is in
a ready state. |
Restored | The WildFire applications service has finished
maintenance procedures. |
Scheduling | The WildFire applications service is in
a scheduling state. |
SetupSampleStorage | This WildFire applications service operates
when WildFire is being upgraded from 7.1 to 8.0. |
Stopped | The WildFire applications service has stopped
on the appliance. |
Suspended | The WildFire applications service has been
suspended due to maintenance. |