PCNSE · Question #44
A company has a pair of Palo Alto Networks firewalls configured as an Acitve/Passive High Availability (HA) pair. What allows the firewall administrator to determine the last date a failover event…
The correct answer is B. Apply the filter subtype eq ha to the System log. To find the last HA failover date, filter the System log for High Availability (HA) events.
Question
A company has a pair of Palo Alto Networks firewalls configured as an Acitve/Passive High Availability (HA) pair. What allows the firewall administrator to determine the last date a failover event occurred?
Options
- AFrom the CLI issue use the show System log
- BApply the filter subtype eq ha to the System log
- CApply the filter subtype eq ha to the configuration log
- DCheck the status of the High Availability widget on the Dashboard of the GUI
How the community answered
(59 responses)- A7% (4)
- B90% (53)
- C2% (1)
- D2% (1)
Why each option
To find the last HA failover date, filter the System log for High Availability (HA) events.
Simply issuing `show system log` from the CLI will display the entire log, making it inefficient to pinpoint specific failover events without a filter.
High Availability (HA) failover events are recorded as system logs. By applying the filter `subtype eq ha` to the System log, administrators can precisely identify all HA-related events, including failovers and their timestamps, providing the last date a failover occurred.
The configuration log records changes made to the firewall's configuration, not operational events like HA failovers.
The High Availability widget on the Dashboard displays the current HA status but typically does not provide a historical record of past failover event dates.
Concept tested: Palo Alto Networks HA failover logging
Source: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/monitor-logs
Topics
Community Discussion
No community discussion yet for this question.