Juniper SRX

Plugin: go.d.plugin Module: snmp

Overview

Monitor Juniper SRX (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 46 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.

Netdata’s SNMP collector matches the device to the juniper-srx.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.

This integration is supported on all platforms.

This integration supports multiple instances configured side-by-side.

Default Behavior

Auto-Detection

Auto-detected as Juniper SRX via sysObjectID/sysDescr.

Limits

The default configuration for this integration does not impose any limits.

Performance Impact

The default configuration for this integration is not expected to impose a significant performance impact on the system.

Setup

You can configure the snmp collector in two ways:

Method	Best for	How to
UI	Fast setup without editing files	Go to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job.
File	If you prefer configuring via file, or need to automate deployments (e.g., with Ansible)	Edit `go.d/snmp.conf` and add a job.

Important
UI configuration requires paid Netdata Cloud plan.

Prerequisites

SNMP access

SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site’s SNMP hub.

Configuration

Options

Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.

via UI

Configure the snmp collector from the Netdata web interface:

Go to Nodes.
Select the node where you want the snmp data-collection job to run and click the :gear: (Configure this node). That node will run the data collection.
The Collectors → Jobs view opens by default.
In the Search box, type snmp (or scroll the list) to locate the snmp collector.
Click the + next to the snmp collector to add a new job.
Fill in the job fields, then click Test to verify the configuration and Submit to save.
- Test runs the job with the provided settings and shows whether data can be collected.
- If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.

via File

The configuration file name for this integration is go.d/snmp.conf.

The file format is YAML. Generally, the structure is:

update_every: 1
autodetection_retry: 0
jobs:
  - name: some_name1
  - name: some_name2

You can edit the configuration file using the edit-config script from the Netdata config directory.

cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf

Examples

There are no configuration examples.

Metrics

On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Juniper SRX profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.

132 metrics in 11 groups; each row is a chart context usable in alerts.

Group	Metrics
Network / Firewall	2
Network / IP	28
Network / Interface	35
Network / Routing	10
Network / TCP	12
Network / UDP	6
Network / VPN	21
System / Activity	2
System / CPU	1
System / Uptime	1
Uncategorized	14

Network / Firewall

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_jnxUserFwLDAPFailedQuery`	`{query}/s`	per ldap_domain_name, ldap_host	LDAP failed queries
`snmp.device_prof_jnxUserFwLDAPTotalQuery`	`{query}/s`	per ldap_domain_name, ldap_host	Total LDAP queries

Network / IP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ipSystemStatsHCInBcastPkts`	`{packet}/s`	per ipversion	The number of IP broadcast datagrams received
`snmp.device_prof_ipSystemStatsHCInForwDatagrams`	`{forward}/s`	per ipversion	Input datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo…
`snmp.device_prof_ipSystemStatsHCInMcastOctets`	`bit/s`	per ipversion	The total number of octets received in IP multicast datagrams
`snmp.device_prof_ipSystemStatsHCInMcastPkts`	`{packet}/s`	per ipversion	The number of IP multicast datagrams received
`snmp.device_prof_ipSystemStatsHCInOctets`	`bit/s`	per ipversion	Octets received in input IP datagrams
`snmp.device_prof_ipSystemStatsHCInReceives`	`{packet}/s`	per ipversion	Input IP datagrams received
`snmp.device_prof_ipSystemStatsHCOutBcastPkts`	`{packet}/s`	per ipversion	The number of IP broadcast datagrams transmitted
`snmp.device_prof_ipSystemStatsHCOutForwDatagrams`	`{packet}/s`	per ipversion	The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
`snmp.device_prof_ipSystemStatsHCOutMcastOctets`	`bit/s`	per ipversion	The total number of octets transmitted in IP multicast datagrams
`snmp.device_prof_ipSystemStatsHCOutMcastPkts`	`{packet}/s`	per ipversion	The number of IP multicast datagrams transmitted
`snmp.device_prof_ipSystemStatsHCOutOctets`	`bit/s`	per ipversion	The total number of octets in IP datagrams delivered to the lower layers for transmission
`snmp.device_prof_ipSystemStatsHCOutRequests`	`{packet}/s`	per ipversion	The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
`snmp.device_prof_ipSystemStatsHCOutTransmits`	`{packet}/s`	per ipversion	The total number of IP datagrams that this entity supplied to the lower layers for transmission
`snmp.device_prof_ipSystemStatsInAddrErrors`	`{error}/s`	per ipversion	Input IP datagrams discarded due to invalid IP address in header
`snmp.device_prof_ipSystemStatsInDiscards`	`{error}/s`	per ipversion	The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
`snmp.device_prof_ipSystemStatsInHdrErrors`	`{error}/s`	per ipversion	Discarded input IP datagrams due to errors in their IP headers
`snmp.device_prof_ipSystemStatsInNoRoutes`	`{errors}/s`	per ipversion	Input IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipSystemStatsInTruncatedPkts`	`{error}/s`	per ipversion	Input IP datagrams discarded due to datagram frame not carrying enough data
`snmp.device_prof_ipSystemStatsInUnknownProtos`	`{error}/s`	per ipversion	Locally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol
`snmp.device_prof_ipSystemStatsOutDiscards`	`{error}/s`	per ipversion	The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
`snmp.device_prof_ipSystemStatsOutFragCreates`	`{fragment}/s`	per ipversion	The number of output datagram fragments that have been generated as a result of IP fragmentation
`snmp.device_prof_ipSystemStatsOutFragFails`	`{error}/s`	per ipversion	The number of IP datagrams that have been discarded because they needed to be fragmented but could not be
`snmp.device_prof_ipSystemStatsOutFragOKs`	`{packet}/s`	per ipversion	The number of IP datagrams that have been successfully fragmented
`snmp.device_prof_ipSystemStatsOutFragReqds`	`{packet}/s`	per ipversion	The number of IP datagrams that would require fragmentation in order to be transmitted
`snmp.device_prof_ipSystemStatsOutNoRoutes`	`{error}/s`	per ipversion	The number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipSystemStatsReasmFails`	`{error}/s`	per ipversion	The number of failures detected by the IP re-assembly algorithm
`snmp.device_prof_ipSystemStatsReasmOKs`	`{packet}/s`	per ipversion	The number of IP datagrams successfully reassembled
`snmp.device_prof_ipSystemStatsReasmReqds`	`{fragment}/s`	per ipversion	The number of IP fragments received that needed to be reassembled at this interface

Network / Interface

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ifAdminStatus`	`{status}`	per interface, interface	Current administrative state of the interface
`snmp.device_prof_ifHighSpeed`	`bit/s`	per interface, interface	Estimate of the interface’s current bandwidth
`snmp.device_prof_ifNumber`	`{interface}`	device	Number of network interfaces regardless of their current state present on this system
`snmp.device_prof_ifOperStatus`	`{status}`	per interface, interface	Current operational state of the interface
`snmp.device_prof_ipIfStatsHCInBcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP broadcast datagrams received
`snmp.device_prof_ipIfStatsHCInDelivers`	`{packet}/s`	per interface_index, ipversion	The total number of datagrams successfully delivered to IP user-protocols including ICMP
`snmp.device_prof_ipIfStatsHCInForwDatagrams`	`{forward}/s`	per interface_index, ipversion	The number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find…
`snmp.device_prof_ipIfStatsHCInMcastOctets`	`bit/s`	per interface_index, ipversion	The total number of octets received in IP multicast datagrams
`snmp.device_prof_ipIfStatsHCInMcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP multicast datagrams received
`snmp.device_prof_ipIfStatsHCInOctets`	`bit/s`	per interface_index, ipversion	The total number of octets received in input IP datagrams, including those received in error
`snmp.device_prof_ipIfStatsHCOutBcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP broadcast datagrams transmitted
`snmp.device_prof_ipIfStatsHCOutForwDatagrams`	`{packet}/s`	per interface_index, ipversion	The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
`snmp.device_prof_ipIfStatsHCOutMcastOctets`	`bit/s`	per interface_index, ipversion	The total number of octets transmitted in IP multicast datagrams
`snmp.device_prof_ipIfStatsHCOutMcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP multicast datagrams transmitted
`snmp.device_prof_ipIfStatsHCOutOctets`	`bit/s`	per interface_index, ipversion	The total number of octets in IP datagrams delivered to the lower layers for transmission
`snmp.device_prof_ipIfStatsHCOutRequests`	`{packet}/s`	per interface_index, ipversion	The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
`snmp.device_prof_ipIfStatsHCOutTransmits`	`{packet}/s`	per interface_index, ipversion	The total number of IP datagrams that this entity supplied to the lower layers for transmission
`snmp.device_prof_ipIfStatsInAddrErrors`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because the IP address in their IP header’s destination field was not a valid address t…
`snmp.device_prof_ipIfStatsInDiscards`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
`snmp.device_prof_ipIfStatsInHdrErrors`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded due to errors in their IP headers
`snmp.device_prof_ipIfStatsInNoRoutes`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipIfStatsInTruncatedPkts`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because the datagram frame didn’t carry enough data
`snmp.device_prof_ipIfStatsInUnknownProtos`	`{error}/s`	per interface_index, ipversion	The number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol
`snmp.device_prof_ipIfStatsOutDiscards`	`{error}/s`	per interface_index, ipversion	The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
`snmp.device_prof_ipIfStatsOutFragCreates`	`{fragment}/s`	per interface_index, ipversion	The number of output datagram fragments that have been generated as a result of IP fragmentation
`snmp.device_prof_ipIfStatsOutFragFails`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that have been discarded because they needed to be fragmented but could not be
`snmp.device_prof_ipIfStatsOutFragOKs`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that have been successfully fragmented
`snmp.device_prof_ipIfStatsOutFragReqds`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that would require fragmentation in order to be transmitted
`snmp.device_prof_ipIfStatsReasmFails`	`{error}/s`	per interface_index, ipversion	The number of failures detected by the IP re-assembly algorithm
`snmp.device_prof_ipIfStatsReasmOKs`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams successfully reassembled
`snmp.device_prof_ipIfStatsReasmReqds`	`{fragment}/s`	per interface_index, ipversion	The number of IP fragments received that needed to be reassembled at this interface
`snmp.device_prof_jnxDcuStatsBytes`	`By/s`	per interface, address_family, destination_class_name	The number of bytes received on this interface, belonging to this address family that match this Destination Class
`snmp.device_prof_jnxDcuStatsPackets`	`{packet}/s`	per interface, address_family, destination_class_name	The number of packets received on this interface, belonging to this address family that match this Destination Class
`snmp.device_prof_jnxScuStatsBytes`	`By/s`	per interface, address_family	Number of bytes sent out of destination interface that match the source class and address family
`snmp.device_prof_jnxScuStatsPackets`	`{packet}/s`	per interface, address_family	Number of packets sent out of destination interface that match the source class and address family

Network / Routing

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ospfIfLsaCount`	`{advertisement}/s`	per ospf_ip_addr, neighbor_id	The total number of link-local link state advertisements in this interface’s link-local link state database
`snmp.device_prof_ospfIfState`	`{status}`	per ospf_ip_addr, neighbor_id	The OSPF Interface State
`snmp.device_prof_ospfNbrEvents`	`{event}/s`	per neighbor_id, neighbor_ip	The number of times this neighbor relationship has changed state or an error has occurred
`snmp.device_prof_ospfNbrLsRetransQLen`	`{message}`	per neighbor_id, neighbor_ip	The current length of the retransmission queue
`snmp.device_prof_ospfNbrState`	`{status}`	per neighbor_id, neighbor_ip	The state of the relationship with this neighbor
`snmp.device_prof_ospfVirtIfLsaCount`	`{advertisement}/s`	per neighbor_id	The total number of link-local link state advertisements in this virtual interface’s link-local link state database
`snmp.device_prof_ospfVirtIfState`	`{status}`	per neighbor_id	OSPF virtual interface states
`snmp.device_prof_ospfVirtNbrEvents`	`{change}/s`	per neighbor_id, neighbor_ip	The number of times this virtual link has changed its state or an error has occurred
`snmp.device_prof_ospfVirtNbrLsRetransQLen`	`{message}`	per neighbor_id, neighbor_ip	The current length of the retransmission queue
`snmp.device_prof_ospfVirtNbrState`	`{status}`	per neighbor_id, neighbor_ip	The state of the virtual neighbor relationship

Network / TCP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_tcpActiveOpens`	`{transition}/s`	device	TCP connections transitioning from CLOSED to SYN-SENT
`snmp.device_prof_tcpAttemptFails`	`{failure}/s`	device	Failed TCP connection attempts
`snmp.device_prof_tcpCurrEstab`	`{connection}`	device	Current TCP connections in ESTABLISHED or CLOSE-WAIT state
`snmp.device_prof_tcpEstabResets`	`{reset}/s`	device	TCP connections reset from ESTABLISHED/CLOSE-WAIT
`snmp.device_prof_tcpHCInSegs`	`{packet}/s`	device	TCP segments received
`snmp.device_prof_tcpHCOutSegs`	`{packet}/s`	device	TCP segments sent
`snmp.device_prof_tcpInErrs`	`{error}/s`	device	TCP segments received with errors
`snmp.device_prof_tcpInSegs`	`{packet}/s`	device	TCP segments received
`snmp.device_prof_tcpOutRsts`	`{reset}/s`	device	TCP segments sent with RST flag
`snmp.device_prof_tcpOutSegs`	`{packet}/s`	device	TCP segments sent
`snmp.device_prof_tcpPassiveOpens`	`{transition}/s`	device	TCP connections transitioning from LISTEN to SYN-RCVD
`snmp.device_prof_tcpRetransSegs`	`{retransmit}/s`	device	TCP segments retransmitted

Network / UDP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_udpHCInDatagrams`	`{packet}/s`	device	UDP datagrams received
`snmp.device_prof_udpHCOutDatagrams`	`{packet}/s`	device	UDP datagrams sent
`snmp.device_prof_udpInDatagrams`	`{packet}/s`	device	UDP datagrams received
`snmp.device_prof_udpInErrors`	`{error}/s`	device	UDP datagrams received but couldn’t be delivered (not due to missing app)
`snmp.device_prof_udpNoPorts`	`{error}/s`	device	UDP datagrams received with no app on the destination port
`snmp.device_prof_udpOutDatagrams`	`{packet}/s`	device	UDP datagrams sent

Network / VPN

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_jnxIkeNumOfTunnels`	`{tunnel}`	device	Total number of active IKE Phase 1 tunnels
`snmp.device_prof_jnxIkeTunMonActiveTime`	`s`	per ike_tunnel_index	Time this IKE Phase 1 tunnel has been active
`snmp.device_prof_jnxIkeTunMonDPDDownCount`	`{event}/s`	per ike_tunnel_index	Number of DPD (Dead Peer Detection) down events on this tunnel
`snmp.device_prof_jnxIkeTunMonInOctets`	`By/s`	per ike_tunnel_index	Number of bytes received on this IKE Phase 1 tunnel
`snmp.device_prof_jnxIkeTunMonInPkts`	`{packet}/s`	per ike_tunnel_index	Number of packets received on this IKE Phase 1 tunnel
`snmp.device_prof_jnxIkeTunMonLifeTime`	`s`	per ike_tunnel_index	Remaining lifetime of the IKE Phase 1 tunnel
`snmp.device_prof_jnxIkeTunMonOutOctets`	`By/s`	per ike_tunnel_index	Number of bytes sent on this IKE Phase 1 tunnel
`snmp.device_prof_jnxIkeTunMonOutPkts`	`{packet}/s`	per ike_tunnel_index	Number of packets sent on this IKE Phase 1 tunnel
`snmp.device_prof_jnxIkeTunMonState`	`{status}`	per ike_tunnel_index	Current state of the IKE Phase 1 tunnel
`snmp.device_prof_jnxIpSecNumOfTunnels`	`{tunnel}`	device	Total number of active IPSec Phase 2 tunnels
`snmp.device_prof_jnxIpSecSaMonActiveTime`	`s`	per sa_index	Time this IPSec Security Association has been active
`snmp.device_prof_jnxIpSecSaMonLifeTime`	`s`	per sa_index	Remaining lifetime of this IPSec Security Association
`snmp.device_prof_jnxIpSecSaMonState`	`{status}`	per sa_index	Status of this IPSec Security Association
`snmp.device_prof_jnxIpSecTunMonDecryptFails`	`{failure}/s`	per ipsec_tunnel_index	Number of decryption failures on this tunnel
`snmp.device_prof_jnxIpSecTunMonDroppedPkts`	`{drop}/s`	per ipsec_tunnel_index	Total number of packets dropped on this IPSec Phase 2 tunnel
`snmp.device_prof_jnxIpSecTunMonEspAuthFails`	`{failure}/s`	per ipsec_tunnel_index	Number of ESP authentication failures on this tunnel
`snmp.device_prof_jnxIpSecTunMonInDecryptedBytes`	`By/s`	per ipsec_tunnel_index	Number of decrypted bytes received on this IPSec Phase 2 tunnel
`snmp.device_prof_jnxIpSecTunMonInDecryptedPkts`	`{packet}/s`	per ipsec_tunnel_index	Number of decrypted packets received on this IPSec Phase 2 tunnel
`snmp.device_prof_jnxIpSecTunMonOutEncryptedBytes`	`By/s`	per ipsec_tunnel_index	Number of encrypted bytes sent on this IPSec Phase 2 tunnel
`snmp.device_prof_jnxIpSecTunMonOutEncryptedPkts`	`{packet}/s`	per ipsec_tunnel_index	Number of encrypted packets sent on this IPSec Phase 2 tunnel
`snmp.device_prof_jnxIpSecTunMonReplayDropPkts`	`{drop}/s`	per ipsec_tunnel_index	Number of packets dropped due to anti-replay check failure

System / Activity

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_hrSystemNumUsers`	`{session}`	device	The number of user sessions for which this host is storing state information. A session is a collection of processes requiring a s…
`snmp.device_prof_hrSystemProcesses`	`{process}`	device	The number of process contexts currently loaded or running on this system.

System / CPU

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_cpu_usage`	`%`	per cpu_index	The current CPU utilization

System / Uptime

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_systemUptime`	`s`	device	Time since the system was last rebooted or powered on.

Uncategorized

Metric (chart context)	Unit	Scope
`snmp.device_prof_hrStorageSize`	`By`	per storage_index, rm:storage_type, rm:storage_alloc_unit
`snmp.device_prof_hrStorageUsed`	`By`	per storage_index, rm:storage_type, rm:storage_alloc_unit
`snmp.device_prof_lldpStatsRemTablesAgeouts`	—	device
`snmp.device_prof_lldpStatsRemTablesDeletes`	—	device
`snmp.device_prof_lldpStatsRemTablesDrops`	—	device
`snmp.device_prof_lldpStatsRemTablesInserts`	—	device
`snmp.device_prof_lldpStatsRemTablesLastChangeTime`	—	device
`snmp.device_prof_lldpStatsRxPortAgeoutsTotal`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsRxPortFramesDiscardedTotal`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsRxPortFramesErrors`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsRxPortFramesTotal`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsRxPortTLVsDiscardedTotal`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsRxPortTLVsUnrecognizedTotal`	—	per lldp_loc_port_num
`snmp.device_prof_lldpStatsTxPortFramesTotal`	—	per lldp_loc_port_num

Alerts

There are no alerts configured by default for this integration.

Juniper SRX

Juniper SRX

Overview

Default Behavior

Auto-Detection

Limits

Performance Impact

Setup

Prerequisites

SNMP access

Configuration

Options

via UI

via File

Examples

Metrics

Network / Firewall

Network / IP

Network / Interface

Network / Routing

Network / TCP

Network / UDP

Network / VPN

System / Activity

System / CPU

System / Uptime

Uncategorized

Alerts

The observability platform companies need to succeed

Book Your Free Demo