Advanced WildFire Powered by Precision AI™
WildFire Application States
Table of Contents
WildFire Application States
Where Can I Use This? | What Do I Need? |
---|---|
|
|
The WildFire appliance operates a series of
internal applications to manage and coordinate processing of sample
data. These applications and their requisite statuses are shown
when viewing the status of a WildFire appliance cluster.
The
following list shows the cluster components, purpose, and status
conditions:
Name | Description | Possible Status Conditions | Definition |
---|---|---|---|
global-db-service | This application database
is used to store WildFire analysis data. | AcquiringSessionSpinLock | Waiting for the session spin lock until acquiring
the lock or timeout. |
Bootstrapping | The sample database application is currently
in a bootstrapping state. | ||
BootstrappingNoMeet | The local sample database service started without
forming a cluster with other WildFire appliances. | ||
FailedToBecomeWorker | Failed to join the cluster as a worker node. | ||
FailedToBootstrap | The bootstrapping process has failed. | ||
FailedToJoinCluster | Failed to join the cluster. | ||
FailedToStartServices | Internal database services failed to start. | ||
MaintenanceDecommission | Starting decommission process for database
services. | ||
MaintenanceDecommissionDone | Database service has been decommissioned. | ||
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. | ||
MaintenanceFailed | Service failover has failed. | ||
MaintenanceFailoverDone | Service failover is done. | ||
MaintenanceRecoverFromSplitbrain | If the WildFire appliance is currently in split-brain
mode, the database service state will be set to MaintenanceRecoverFromSplitbrain
upon the start of the service. | ||
MaintenanceSuspend | The database service is in the process of
being suspended as a result of the user issuing one of the following
commands: debug cluster suspend or request cluster decommission. | ||
MaintenanceSuspendDone | The database service has completed the suspension
process. | ||
DataMigration | The contents of the local database is being merged
with the primary database. This occurs when a WildFire appliance
joins a cluster. | ||
DataMigrationDone | The data migration process is complete. | ||
DataMigrationFailed | The data migration process has failed. | ||
JoinedCluster | The local database service has joined the cluster. | ||
Ready | The database service is in a ready state. | ||
ReadyLeader | The database service is in a ready state
and the appliance is set as the leader. | ||
ReadyStandalone | The database service is in a ready state
and the appliance is operating as a standalone appliance. | ||
Splitbrain | A split-brain condition has been detected
and the database services has entered split-brain mode. The service
will transition to ReadyStandalone shortly. | ||
StandbyAsWorker | The worker node database service is in a standby
state. | ||
WaitingforLeaderReady | The local node is waiting to join the leader node. |
Name | Description | Possible Status Conditions | Definition |
---|---|---|---|
global-queue-service | Handles the management and prioritization
of samples sent for WildFire analysis. | Bootstrapping | Queuing service application is currently
in a bootstrapping state. |
FailedToBecomeWorker | Failed to join the cluster as a worker node. | ||
FailedToBootstrap | The bootstrapping process has failed. | ||
FailedToJoinCluster | Failed to join the cluster. | ||
FailedToStartServices | Internal queuing services failed to start. | ||
MaintenanceDecommission | Starting decommission process for queuing
services. | ||
MaintenanceDecommissionDone | Queuing service has been decommissioned. | ||
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. | ||
MaintenanceFailed | Service failover has failed. | ||
MaintenanceFailoverDone | Service failover is done. | ||
MaintenanceRecoverFromSplitbrain | If the WildFire appliance is currently in split-brain
mode, the queuing service state will be set to | ||
MaintenanceSuspend | The queuing service is in the process of
being suspended as a result of the user issuing one of the following
commands: debug cluster suspend or request cluster decommission. | ||
MaintenanceSuspendDone | The queuing service has completed the suspension
process. | ||
JoinedCluster | The queuing service has joined the cluster. | ||
Ready | The queuing service is in a ready state. | ||
ReadyLeader | The queuing service is in a ready state
and the appliance is set as the leader. | ||
ReadyStandalone | The queuing service is in a ready state
and the appliance is operating as a standalone appliance. | ||
Splitbrain | A split-brain condition has been detected
and the queuing services has entered split-brain mode. The service
will transition to ReadyStandalone shortly. | ||
StandbyAsWorker | The worker node queuing service is in a standby
state. |
Name | Description | Possible Status Conditions | Definition |
---|---|---|---|
siggen-db | Generates WildFire private signatures
and analysis samples. | DatabaseFailover | When HA failover occurs, the passive controller
becomes the active controller. The signature service in the passive
controller becomes the primary and the state is set to DatabaseFailover. |
DatabaseFailoverFaild | The signature database failover has failed. | ||
DataMigration | The contents of the local signature database
is being merged with the primary database. This occurs when a WildFire appliance
joins a cluster. | ||
DataMigrationDone | The data migration process is complete. | ||
DataMigrationFailed | The data migration process has failed. | ||
Deregistered | Signature database service has been deregistered. | ||
MaintenanceDecommission | Starting decommission process for signature
database services. | ||
MaintenanceDecommissionDone | Queuing service has been decommissioned. | ||
MaintenanceFailover | Starting the process to demote local service
and failover backup replica. | ||
MaintenanceFailoverDone | Service failover is done. | ||
MaintenanceSuspend | The signature database service is in the process
of being suspended as a result of the user issuing one of the following commands:
debug cluster suspend or request cluster decommission. | ||
MaintenanceSuspendDone | The signature database service has completed
the suspension process. | ||
MigrateMalwareDatabase | When upgrading PAN-OS from
version 7.1 to 8.0, the sample data is converted to a different format.
These states indicate the progress of the data migration process. | ||
MigrateSiggenDatabaseStage1 | |||
MigrateSiggenDatabaseStage2 | |||
MigrateSiggenDatabaseStage3 | |||
Ready | The signature database service is in a ready
state. | ||
ReadyMaster | The signature database service is in primary
mode and is operating on the active controller. | ||
ReadySlave | The signature database service is in backup
mode and is operating on the passive controller. | ||
ReadyStandalone | The signature database service is in a ready
state and the appliance is operating as a standalone appliance. | ||
Splitbrain | A split-brain condition has been detected
and the signature database service has entered split-brain mode.
The service will transition to ReadyStandalone shortly. | ||
Stopped | The signature database service has stopped
on the appliance. |
Name | Description | Possible Status Conditions | Definition |
---|---|---|---|
wildfire-management-service | WildFire work mode management service. | Running | The WildFire management service is in an operational state. |
Done | The WildFire management service has finished running. |
Name | Description | Possible Status Conditions | Definition |
---|---|---|---|
wildfire-apps-service | WildFire infrastructure applications. | Deregistered | The WildFire applications service has been
deregistered. |
Ready | The WildFire applications service is in
a ready state. | ||
Restored | The WildFire applications service has finished
maintenance procedures. | ||
Scheduling | The WildFire applications service is in
a scheduling state. | ||
SetupSampleStorage | This WildFire applications service operates
when WildFire is being upgraded from 7.1 to 8.0. | ||
Stopped | The WildFire applications service has stopped
on the appliance. | ||
Suspended | The WildFire applications service has been
suspended due to maintenance. |