Resolving Log Slowness in PAN-OS Due to UI-Telemetry

Introduction

If you have noticed that Traffic, Threat, or System logs are slow to load or not appearing in the MONITOR tab of your Palo Alto Networks firewall, it may be due to a software issue related to UI-Telemetry. This issue is documented under PAN-241504 and affects certain versions of PAN-OS.

In this blog post, we will cover the symptoms, affected environments, root cause, and steps to resolve the issue.

Symptoms

When UI-Telemetry (cfg.features.ui-telemetry) is enabled, you may experience:

• Slow or missing logs in the MONITOR tab.

• Filtering logs takes longer than expected.

• Logs do not appear even without applying filters.

Affected Environment

• Palo Alto Networks PA-Series Next-Generation Firewalls

• PAN-OS versions affected: Prior to 11.1.3 and 11.2.2

• Feature affected: UI-Telemetry

Root Cause

This issue is caused by a software bug in PAN-OS that affects the UI-Telemetry feature. When enabled, it may slow down the processing and display of logs in the web interface.

Resolution & Workaround

Temporary Workaround: Disable UI-Telemetry

You can temporarily disable UI-Telemetry without affecting device telemetry. Run the following CLI command:

> request ui telemetry disabled

After disabling, check if logs appear normally.

To verify if UI-Telemetry is enabled, use:

> show system state | match cfg.features.ui-telemetry

If the output shows enabled: True, UI-Telemetry is still active.

Permanent Fix: Upgrade PAN-OS

This issue has been addressed in the following PAN-OS versions:

• 11.1.3

• 11.2.2

Upgrading to one of these versions will permanently resolve the log slowness issue.