Palo Alto Networks firewalls: Job(s) stuck in pending

Notice: This blog post was originally published on Indeni before its acquisition by BlueCat.

The content reflects the expertise and perspectives of the Indeni team at the time of writing. While some references may be outdated, the insights remain valuable. For the latest updates and solutions, explore the rest of our blog

Key Takeaways
  • The alert identifies one or more firewall jobs that have remained in a “pending” (PEND) state for over 30 minutes.
  • In the sample alert, EBLRefresh and Install are cited as affected jobs exhibiting the stuck pending condition.
  • The monitoring system periodically runs the “show jobs all” command on Palo Alto Networks firewalls to collect job status information.
  • The alert logic specifically triggers when it detects any job remaining in the PEND state beyond a 30-minute threshold.
  • Recommended remediation is to review the listed jobs for issues and, if appropriate, stop and re-issue the jobs.
  • Additional troubleshooting guidance for this alert is available in the referenced documentation DOC-2259.

This is a real life sample alert from the indeni alert guide for Palo Alto Networks Firewalls.

Description:

One or more jobs running on this device have been stuck in “pending” state for more than 30 minutes.

Affected Jobs:

  • EBLRefresh

  • Install

Manual Remediation Steps:
Review the jobs listed above for possible issues. You may want to stop and re-issue the job if possible. For more information read DOC-2259.

How does this alert work?
indeni reviews the current list of jobs on a regular basis by running “show jobs all”. For this alert, indeni looks for jobs that have been stuck in PEND for more than 30 minutes.


Published in:

Related content

Three armored figures walking toward a futuristic Las Vegas skyline with pyramids, glowing orb, and "Welcome to Fabulous Las

Your journey to intelligent NetOps begins at Cisco Live

Visit BlueCat’s booth or book a meeting now to learn more about how our solutions can help you build a network that supports constant change.

Read more
Stacked colorful wooden directional arrows on a post by a calm seaside with distant hills and blue sky

Replace BIND and ISC with Micetro DNS/DHCP Server (MDDS)

Tired of patching and manually configuring BIND DNS and ISC DHCP? Discover how Micetro MDDS appliances can replace them for modern DDI.

Read more
Row of orange industrial robotic arms positioned along an automated conveyor belt in a factory setting

Automate it all in Integrity with REST v2 API-first DDI management

Discover API-first DDI with Integrity X by using REST v2 to automate DNS, DHCP, and IPAM for scalable, secure network operations.

Read more
Three colleagues at monitors collaborating, overlaid with network, analytics, cloud, and gear icons.

Agentic AI adoption in network observability propels NetOps teams

Network observability is crucial for today’s networks and even more capable with agentic AI, according to new Omdia and BlueCat research.

Read more

⏳ Cisco Live is almost here. Put BlueCat on your agenda for smarter, more secure networks.