Sep. 4, 2020 We have addressed the issue, and GlobalProtect logs are forwarding to Cortex Data Lake for all Prisma Access customers. GlobalProtect logs between August 28, 2020, and September 3, 2020, are targeted to be available in Cortex Data Lake by September 22, 2020. If there is an immediate need for a GlobalProtect log that was generated during this timeframe, please open a support case ticket at https://support.paloaltonetworks.com/.
Posted Sep 05, 2020 - 02:46 UTC
Monitoring
A fix has been implemented and we are monitoring the results.
Posted Sep 03, 2020 - 08:44 UTC
Update
We are continuing to work on a fix for this issue.
Posted Sep 01, 2020 - 19:13 UTC
Identified
We have identified an issue where GlobalProtect logs from the Prisma Access Mobile Gateways and Portals are not forwarded to Cortex Data Lake. Our engineers identified the root cause of this issue and diligently working on a fix. We will update the status page periodically with the latest progress. We are addressing the log forwarding issues for all supported panorama versions for Prisma Access (9.0.4 - 10.0).
Workaround: For Customers with 9.1 and above versions of Panorama, please use the 'Log Forwarding of GlobalProtect logs' option to forward the logs to Cortex Data Lake. We do not have a workaround for the Panorama 9.0 customers, we are working on a fix.