
OPERATIONAL DEFECT DATABASE
...

...
The earliest recollection of this bug is traced back to PAN-OS 8.1 - July 22, 2025. This bug is fixed in PAN-OS versions 8.1.7. ( Panorama M-Series and virtual appliances only ) There is a rare issue where the purge script does not remove the oldest Elasticsearch (ES) indices to make room for new ones as expected when the appliance reaches maximum capacity. This prevents the web interface from displaying any logs for the days associated with those new ES indices (see known issue PAN-114041 ) because those indices are empty (the appliances cannot read or write to them). If you experience this issue, contact your Support team for assistance. ( Panorama M-Series and virtual appliances only ) Fixed a rare issue where the web interface did not display new logs as expected because Elasticsearch (ES) stopped working when the Raid drives reached maximum capacity and the purge script to remove old ES indices failed to execute and make room for new indices. However, this issue also resulted in creation of new ES indices that were empty because the appliance could not read or write to them. With this fix, old indices are purged as expected; however, empty ES indices created before you upgraded to this release with this fix are not removed as expected (see known issue PAN-114041 ). For more information: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-addressed-issues/pan-os-8-1-7-addressed-issues https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-release-information/known-issues/known-issues-related-to-pan-os-8-1-releases
Palo Alto Networks Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.