Focus

PAN-OS Device Telemetry Metrics Reference

AIOps Application Logs

Table of Contents

AIOps Application Logs

Elasticsearch cURL log capturing ES API requests, responses, index purge operations, and cluster management events. Elasticsearch service restart log capturing ES startup sequence events, JVM initialization state, index template validation results, and shard recovery status after restarts. PDF report generation log capturing scheduled and on-demand report job creation events, rendering pipeline status, output file path, and job completion or failure events. General report generation log capturing aggregate report job scheduling, per-report processing status, data retrieval events, and report output generation completion or error events. LCaaS (Log Collector as a Service) scheduled report log capturing cloud-based report scheduling events, job dispatch status, and report delivery confirmation or failure. Log dispatcher log capturing log transmission events, send failures, and queue management for all configured log destinations. Mail client (mailclient) log capturing email notification dispatch events for scheduled reports and system alerts, including SMTP connection status and delivery success or failure.

Metric Details

Category	Device Health and Performance
Frequency	Every hour
Telemetry Tier	Full
Equivalent CLI Command	echo "AIOPS_LOGS:ES:/var/log/pan/es_curl.log" && ls -1rt /var/log/pan/es_curl.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:ES:/var/log/pan/es_restart.log" && ls -1rt /var/log/pan/es_restart.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:PDFREP:/var/log/pan/gen_pdf_reports.log" && ls -1rt /var/log/pan/gen_pdf_reports.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^.$(date -d"1 hour ago" +"%Y/%m/%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:GENREP:/var/log/pan/genreport.log" && ls -1rt /var/log/pan/genreport.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:SCHEDREP:/opt/plugins/var/log/pan/lcaas_scheduled_reports.log" && ls -1rt /opt/plugins/var/log/pan/lcaas_scheduled_reports.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:LOGD:/var/log/pan/logd.log" && ls -1rt /var/log/pan/logd.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000 echo "AIOPS_LOGS:MAILCL:/var/log/pan/mailclient.log" && ls -1rt /var/log/pan/mailclient.log* \| xargs -n1 env LC_ALL=C grep -ha -A1000000 "^$(date -d"1 hour ago" +"%Y-%m-%d %H"):..:.." \| LC_ALL=C grep -oE "^.{3,500}" \| tail -10000

Advanced Routing Resources and Routes

AIOps Node Details