Palo Alto

Plugin: go.d.plugin Module: snmp

Overview

Monitor Palo Alto (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 1 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.

Netdata’s SNMP collector matches the device to the palo-alto.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.

This integration is supported on all platforms.

This integration supports multiple instances configured side-by-side.

Default Behavior

Auto-Detection

Auto-detected as Palo Alto via sysObjectID/sysDescr.

Limits

The default configuration for this integration does not impose any limits.

Performance Impact

The default configuration for this integration is not expected to impose a significant performance impact on the system.

Setup

You can configure the snmp collector in two ways:

Method	Best for	How to
UI	Fast setup without editing files	Go to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job.
File	If you prefer configuring via file, or need to automate deployments (e.g., with Ansible)	Edit `go.d/snmp.conf` and add a job.

Important
UI configuration requires paid Netdata Cloud plan.

Prerequisites

SNMP access

SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site’s SNMP hub.

Configuration

Options

Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.

via UI

Configure the snmp collector from the Netdata web interface:

Go to Nodes.
Select the node where you want the snmp data-collection job to run and click the :gear: (Configure this node). That node will run the data collection.
The Collectors → Jobs view opens by default.
In the Search box, type snmp (or scroll the list) to locate the snmp collector.
Click the + next to the snmp collector to add a new job.
Fill in the job fields, then click Test to verify the configuration and Submit to save.
- Test runs the job with the provided settings and shows whether data can be collected.
- If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.

via File

The configuration file name for this integration is go.d/snmp.conf.

The file format is YAML. Generally, the structure is:

update_every: 1
autodetection_retry: 0
jobs:
  - name: some_name1
  - name: some_name2

You can edit the configuration file using the edit-config script from the Netdata config directory.

cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf

Examples

There are no configuration examples.

Metrics

On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Palo Alto profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.

109 metrics in 12 groups; each row is a chart context usable in alerts.

Group	Metrics
Hardware / FRU	3
Network / IP	28
Network / Interface	31
Network / Routing	10
Network / TCP	12
Network / UDP	6
Network / VPN	3
System / Activity	10
System / CPU	1
System / Power	2
System / Uptime	1
Uncategorized	2

Hardware / FRU

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_panEntryFRUModuleNumPorts`	`{port}`	per FRUmodule_index, ent_descr	Number of ports on the FRU Module
`snmp.device_prof_panEntryFRUModulePowerUsed`	`W`	per FRUmodule_index, ent_descr	Power used by the FRU Module in watts
`snmp.device_prof_panEntryFanTrayPowerUsed`	`W`	per fan_tray_index, ent_descr	Power used by the Fan Tray in watts

Network / IP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ipSystemStatsHCInBcastPkts`	`{packet}/s`	per ipversion	The number of IP broadcast datagrams received
`snmp.device_prof_ipSystemStatsHCInForwDatagrams`	`{forward}/s`	per ipversion	Input datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo…
`snmp.device_prof_ipSystemStatsHCInMcastOctets`	`bit/s`	per ipversion	The total number of octets received in IP multicast datagrams
`snmp.device_prof_ipSystemStatsHCInMcastPkts`	`{packet}/s`	per ipversion	The number of IP multicast datagrams received
`snmp.device_prof_ipSystemStatsHCInOctets`	`bit/s`	per ipversion	Octets received in input IP datagrams
`snmp.device_prof_ipSystemStatsHCInReceives`	`{packet}/s`	per ipversion	Input IP datagrams received
`snmp.device_prof_ipSystemStatsHCOutBcastPkts`	`{packet}/s`	per ipversion	The number of IP broadcast datagrams transmitted
`snmp.device_prof_ipSystemStatsHCOutForwDatagrams`	`{packet}/s`	per ipversion	The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
`snmp.device_prof_ipSystemStatsHCOutMcastOctets`	`bit/s`	per ipversion	The total number of octets transmitted in IP multicast datagrams
`snmp.device_prof_ipSystemStatsHCOutMcastPkts`	`{packet}/s`	per ipversion	The number of IP multicast datagrams transmitted
`snmp.device_prof_ipSystemStatsHCOutOctets`	`bit/s`	per ipversion	The total number of octets in IP datagrams delivered to the lower layers for transmission
`snmp.device_prof_ipSystemStatsHCOutRequests`	`{packet}/s`	per ipversion	The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
`snmp.device_prof_ipSystemStatsHCOutTransmits`	`{packet}/s`	per ipversion	The total number of IP datagrams that this entity supplied to the lower layers for transmission
`snmp.device_prof_ipSystemStatsInAddrErrors`	`{error}/s`	per ipversion	Input IP datagrams discarded due to invalid IP address in header
`snmp.device_prof_ipSystemStatsInDiscards`	`{error}/s`	per ipversion	The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
`snmp.device_prof_ipSystemStatsInHdrErrors`	`{error}/s`	per ipversion	Discarded input IP datagrams due to errors in their IP headers
`snmp.device_prof_ipSystemStatsInNoRoutes`	`{errors}/s`	per ipversion	Input IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipSystemStatsInTruncatedPkts`	`{error}/s`	per ipversion	Input IP datagrams discarded due to datagram frame not carrying enough data
`snmp.device_prof_ipSystemStatsInUnknownProtos`	`{error}/s`	per ipversion	Locally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol
`snmp.device_prof_ipSystemStatsOutDiscards`	`{error}/s`	per ipversion	The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
`snmp.device_prof_ipSystemStatsOutFragCreates`	`{fragment}/s`	per ipversion	The number of output datagram fragments that have been generated as a result of IP fragmentation
`snmp.device_prof_ipSystemStatsOutFragFails`	`{error}/s`	per ipversion	The number of IP datagrams that have been discarded because they needed to be fragmented but could not be
`snmp.device_prof_ipSystemStatsOutFragOKs`	`{packet}/s`	per ipversion	The number of IP datagrams that have been successfully fragmented
`snmp.device_prof_ipSystemStatsOutFragReqds`	`{packet}/s`	per ipversion	The number of IP datagrams that would require fragmentation in order to be transmitted
`snmp.device_prof_ipSystemStatsOutNoRoutes`	`{error}/s`	per ipversion	The number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipSystemStatsReasmFails`	`{error}/s`	per ipversion	The number of failures detected by the IP re-assembly algorithm
`snmp.device_prof_ipSystemStatsReasmOKs`	`{packet}/s`	per ipversion	The number of IP datagrams successfully reassembled
`snmp.device_prof_ipSystemStatsReasmReqds`	`{fragment}/s`	per ipversion	The number of IP fragments received that needed to be reassembled at this interface

Network / Interface

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ifAdminStatus`	`{status}`	per interface, interface	Current administrative state of the interface
`snmp.device_prof_ifHighSpeed`	`bit/s`	per interface, interface	Estimate of the interface’s current bandwidth
`snmp.device_prof_ifNumber`	`{interface}`	device	Number of network interfaces regardless of their current state present on this system
`snmp.device_prof_ifOperStatus`	`{status}`	per interface, interface	Current operational state of the interface
`snmp.device_prof_ipIfStatsHCInBcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP broadcast datagrams received
`snmp.device_prof_ipIfStatsHCInDelivers`	`{packet}/s`	per interface_index, ipversion	The total number of datagrams successfully delivered to IP user-protocols including ICMP
`snmp.device_prof_ipIfStatsHCInForwDatagrams`	`{forward}/s`	per interface_index, ipversion	The number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find…
`snmp.device_prof_ipIfStatsHCInMcastOctets`	`bit/s`	per interface_index, ipversion	The total number of octets received in IP multicast datagrams
`snmp.device_prof_ipIfStatsHCInMcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP multicast datagrams received
`snmp.device_prof_ipIfStatsHCInOctets`	`bit/s`	per interface_index, ipversion	The total number of octets received in input IP datagrams, including those received in error
`snmp.device_prof_ipIfStatsHCOutBcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP broadcast datagrams transmitted
`snmp.device_prof_ipIfStatsHCOutForwDatagrams`	`{packet}/s`	per interface_index, ipversion	The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
`snmp.device_prof_ipIfStatsHCOutMcastOctets`	`bit/s`	per interface_index, ipversion	The total number of octets transmitted in IP multicast datagrams
`snmp.device_prof_ipIfStatsHCOutMcastPkts`	`{packet}/s`	per interface_index, ipversion	The number of IP multicast datagrams transmitted
`snmp.device_prof_ipIfStatsHCOutOctets`	`bit/s`	per interface_index, ipversion	The total number of octets in IP datagrams delivered to the lower layers for transmission
`snmp.device_prof_ipIfStatsHCOutRequests`	`{packet}/s`	per interface_index, ipversion	The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
`snmp.device_prof_ipIfStatsHCOutTransmits`	`{packet}/s`	per interface_index, ipversion	The total number of IP datagrams that this entity supplied to the lower layers for transmission
`snmp.device_prof_ipIfStatsInAddrErrors`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because the IP address in their IP header’s destination field was not a valid address t…
`snmp.device_prof_ipIfStatsInDiscards`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
`snmp.device_prof_ipIfStatsInHdrErrors`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded due to errors in their IP headers
`snmp.device_prof_ipIfStatsInNoRoutes`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because no route could be found to transmit them to their destination
`snmp.device_prof_ipIfStatsInTruncatedPkts`	`{error}/s`	per interface_index, ipversion	The number of input IP datagrams discarded because the datagram frame didn’t carry enough data
`snmp.device_prof_ipIfStatsInUnknownProtos`	`{error}/s`	per interface_index, ipversion	The number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol
`snmp.device_prof_ipIfStatsOutDiscards`	`{error}/s`	per interface_index, ipversion	The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
`snmp.device_prof_ipIfStatsOutFragCreates`	`{fragment}/s`	per interface_index, ipversion	The number of output datagram fragments that have been generated as a result of IP fragmentation
`snmp.device_prof_ipIfStatsOutFragFails`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that have been discarded because they needed to be fragmented but could not be
`snmp.device_prof_ipIfStatsOutFragOKs`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that have been successfully fragmented
`snmp.device_prof_ipIfStatsOutFragReqds`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams that would require fragmentation in order to be transmitted
`snmp.device_prof_ipIfStatsReasmFails`	`{error}/s`	per interface_index, ipversion	The number of failures detected by the IP re-assembly algorithm
`snmp.device_prof_ipIfStatsReasmOKs`	`{packet}/s`	per interface_index, ipversion	The number of IP datagrams successfully reassembled
`snmp.device_prof_ipIfStatsReasmReqds`	`{fragment}/s`	per interface_index, ipversion	The number of IP fragments received that needed to be reassembled at this interface

Network / Routing

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_ospfIfLsaCount`	`{advertisement}/s`	per ospf_ip_addr, neighbor_id	The total number of link-local link state advertisements in this interface’s link-local link state database
`snmp.device_prof_ospfIfState`	`{status}`	per ospf_ip_addr, neighbor_id	The OSPF Interface State
`snmp.device_prof_ospfNbrEvents`	`{event}/s`	per neighbor_id, neighbor_ip	The number of times this neighbor relationship has changed state or an error has occurred
`snmp.device_prof_ospfNbrLsRetransQLen`	`{message}`	per neighbor_id, neighbor_ip	The current length of the retransmission queue
`snmp.device_prof_ospfNbrState`	`{status}`	per neighbor_id, neighbor_ip	The state of the relationship with this neighbor
`snmp.device_prof_ospfVirtIfLsaCount`	`{advertisement}/s`	per neighbor_id	The total number of link-local link state advertisements in this virtual interface’s link-local link state database
`snmp.device_prof_ospfVirtIfState`	`{status}`	per neighbor_id	OSPF virtual interface states
`snmp.device_prof_ospfVirtNbrEvents`	`{change}/s`	per neighbor_id, neighbor_ip	The number of times this virtual link has changed its state or an error has occurred
`snmp.device_prof_ospfVirtNbrLsRetransQLen`	`{message}`	per neighbor_id, neighbor_ip	The current length of the retransmission queue
`snmp.device_prof_ospfVirtNbrState`	`{status}`	per neighbor_id, neighbor_ip	The state of the virtual neighbor relationship

Network / TCP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_tcpActiveOpens`	`{transition}/s`	device	TCP connections transitioning from CLOSED to SYN-SENT
`snmp.device_prof_tcpAttemptFails`	`{failure}/s`	device	Failed TCP connection attempts
`snmp.device_prof_tcpCurrEstab`	`{connection}`	device	Current TCP connections in ESTABLISHED or CLOSE-WAIT state
`snmp.device_prof_tcpEstabResets`	`{reset}/s`	device	TCP connections reset from ESTABLISHED/CLOSE-WAIT
`snmp.device_prof_tcpHCInSegs`	`{packet}/s`	device	TCP segments received
`snmp.device_prof_tcpHCOutSegs`	`{packet}/s`	device	TCP segments sent
`snmp.device_prof_tcpInErrs`	`{error}/s`	device	TCP segments received with errors
`snmp.device_prof_tcpInSegs`	`{packet}/s`	device	TCP segments received
`snmp.device_prof_tcpOutRsts`	`{reset}/s`	device	TCP segments sent with RST flag
`snmp.device_prof_tcpOutSegs`	`{packet}/s`	device	TCP segments sent
`snmp.device_prof_tcpPassiveOpens`	`{transition}/s`	device	TCP connections transitioning from LISTEN to SYN-RCVD
`snmp.device_prof_tcpRetransSegs`	`{retransmit}/s`	device	TCP segments retransmitted

Network / UDP

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_udpHCInDatagrams`	`{packet}/s`	device	UDP datagrams received
`snmp.device_prof_udpHCOutDatagrams`	`{packet}/s`	device	UDP datagrams sent
`snmp.device_prof_udpInDatagrams`	`{packet}/s`	device	UDP datagrams received
`snmp.device_prof_udpInErrors`	`{error}/s`	device	UDP datagrams received but couldn’t be delivered (not due to missing app)
`snmp.device_prof_udpNoPorts`	`{error}/s`	device	UDP datagrams received with no app on the destination port
`snmp.device_prof_udpOutDatagrams`	`{packet}/s`	device	UDP datagrams sent

Network / VPN

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_panGPGWUtilizationActiveTunnels`	`{tunnel}`	device	Number of active tunnels
`snmp.device_prof_panGPGWUtilizationMaxTunnels`	`{tunnel}`	device	Max tunnels allowed
`snmp.device_prof_panGPGWUtilizationPct`	`%`	device	GlobalProtect Gateway utilization percentage

System / Activity

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_hrSystemNumUsers`	`{session}`	device	The number of user sessions for which this host is storing state information. A session is a collection of processes requiring a s…
`snmp.device_prof_hrSystemProcesses`	`{process}`	device	The number of process contexts currently loaded or running on this system.
`snmp.device_prof_panSessionActive`	`{session}`	device	Total number of active sessions
`snmp.device_prof_panSessionActiveICMP`	`{session}`	device	Total number of active ICMP sessions
`snmp.device_prof_panSessionActiveSslProxy`	`{session}`	device	Total number of active SSL proxy sessions
`snmp.device_prof_panSessionActiveTcp`	`{session}`	device	Total number of active TCP sessions
`snmp.device_prof_panSessionActiveUdp`	`{session}`	device	Total number of active UDP sessions
`snmp.device_prof_panSessionMax`	`{session}`	device	Total number of sessions supported
`snmp.device_prof_panSessionSslProxyUtilization`	`%`	device	SSL proxy session utilization percentage
`snmp.device_prof_panSessionUtilization`	`%`	device	Session table utilization percentage

System / CPU

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_cpu_usage`	`%`	per cpu_index	The current CPU utilization

System / Power

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_panEntityTotalPowerAvail`	`W`	device	Total power available on the system in watts
`snmp.device_prof_panEntityTotalPowerUsed`	`W`	device	Total power used on the system in watts

System / Uptime

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_systemUptime`	`s`	device	Time since the system was last rebooted or powered on.

Uncategorized

Metric (chart context)	Unit	Scope	Description
`snmp.device_prof_hrStorageSize`	`By`	per storage_index, rm:storage_type, rm:storage_alloc_unit
`snmp.device_prof_hrStorageUsed`	`By`	per storage_index, rm:storage_type, rm:storage_alloc_unit

Alerts

There are no alerts configured by default for this integration.

Palo Alto

Palo Alto

Overview

Default Behavior

Auto-Detection

Limits

Performance Impact

Setup

Prerequisites

SNMP access

Configuration

Options

via UI

via File

Examples

Metrics

Hardware / FRU

Network / IP

Network / Interface

Network / Routing

Network / TCP

Network / UDP

Network / VPN

System / Activity

System / CPU

System / Power

System / Uptime

Uncategorized

Alerts

The observability platform companies need to succeed

Book Your Free Demo