View WildFire Cluster Status Using Panorama

1. On the primary Panorama appliance, select PanoramaManaged WildFire Clusters.
2. In the Cluster Status column, verify the health of each cluster.

   For clusters running PAN-OS 12.2.2 and later, the column displays a color-coded health indicator:

   State	Condition	Action
   Green	All services operational and healthy.	No action required. CLI equivalent: Healthy.
   Yellow	One or more management plane or signature generation services are degraded.	Investigate the degraded service. The cluster continues to analyze samples but may have reduced capacity. CLI equivalent: Degraded.
   Red	One or more core services are down.	Immediate attention required. Core services (Database, Messaging, or WildFire Services) are unavailable. CLI equivalent: Unhealthy.

   For clusters running PAN-OS 12.1 and earlier, verify that:

   • The wfpc and signature services are running.
   • No abnormal operations are present. Abnormal operations and their status conditions include:
     • Decommission [requested / ongoing / denied / success / fail]
     • Suspend [requested / ongoing / denied / success / fail]
     • Reboot [requested / ongoing / denied / success / fail]
     • Cluster [offline / splitbrain / unready]
     • Service [suspended / none]
     • HA [peer-offline / cfg-not-sync / cfg-sync-off]
3. In the Config Status column, verify that the appliance configuration is In Sync with the configuration stored on the Panorama appliance.

   If the status shows Out of Sync, the appliance configuration is not in sync with its saved configuration on Panorama. Mouse over the magnifying glass to display the cause of the sync failure.
4. In the Connected column, verify that the configured WildFire appliances show a status of Connected.
5. (Optional) (PAN-OS 12.2.2 and later) To monitor cluster health from the Panorama CLI, run the following commands:

   admin@Panorama> show wildfire-appliance health all

   Health Status:
   
     Serial  : 012345000001
     Health  : Healthy
     Updated : yes
   
     Serial  : 012345000002
     Health  : Healthy
     Updated : yes
   
     Serial  : 012345000003
     Health  : Unhealthy
     Updated : yes

   admin@Panorama> show wildfire-appliance-cluster health all

   Cluster Health:
     Name    : mycluster
     Health  : Healthy
     Updated : yes
   
     Serial  : 012345000001
     Health  : Healthy
     Updated : yes
   
     Serial  : 012345000002
     Health  : Healthy
     Updated : yes
   
     Serial  : 012345000003
     Health  : Healthy
     Updated : yes
     -------------------------
     Name    : cluster-2
     Health  : Degraded
     Updated : no

   The Updated field indicates whether the cluster metadata push is current. If cluster membership has changed since the last push, this field reports no.