Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

CPU value mismatch among orion and Palo alto CPU load data

Hello everyone,

We have an issue wherein the CPU load for Palo alto device and the CPU load of that device on orion is not matching, There is a huge gap between both.

We are mostly concerned about the data plane CPU utilization. Even the no of cpu on the Palo end is more and in orion end only 2 of them are showing with incorrect values.

Is there any one else experiencing same issue and any solutions for same will be highly appreciated.

Machine Type is - Palo Alto Networks VM-Series firewall.

We have received OID from Palo support for our device Palo Alto Networks VM-Series firewall but in orion we are using the same OID even tried with UNDP but it didn't work.

Thanks !!

Hope to hear soon as it is critical for us to get it fixed .

Regards,

Samiksha

Find more posts tagged with

Palo Alto Networks VM-Series firewall

Accepted answers

All comments

mark.gover

You could always ask Palo Alto for the MiBs of the firewall and submit it to Solarwinds support so they can add it to the Orion MiB database, then update the database. Not saying this will solve your problem but its worth a try.

adam.beedell

Best short term fix: Check in mib browser to see if you can find the data you're expecting
If you can, set a UNDP for that, assign to the palos, then report to SLW

If you cant, report to palo alto.

stevenstadel

Try this App Template to pull the different CPU (Dataplane vs Management) - Palo Alto Metrics - Application Monitor Templates - Server & Application Monitor - THWACK (solarwinds.com)

I personally prefer using SAM, if possible, for polling SNMP because I can get more advanced features like using Baseline Metrics.

If you need to use UnDP these are the OIDs that work for us.

CPU Management Plane - SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.1

CPU Dataplane System Function - SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.2

samiksha_shruti

Thanks for reply Steve have already tried with UNDP poller approach and same OID we are using but the data is not coming correct.Even the total no of CPU is 7-8 in palo device but in orion only one 2 CPU is shown. Can you provide any insights in this regard it would be helpful.

Machine Type is - Palo Alto Networks VM-Series firewall.

stevenstadel

It all depends on what OID is being polled, which can change depending on the firmware running on the firewall. I suggest opening a case with Palo Alto to compare the results you are getting with an SNMPwalk vs what the vendor is showing. Once the vendor confirms the OID for your specific model and firmware you can change the OID that is being polled for CPU. Verify device data for NPM and SAM using SNMPwalk (solarwinds.com), Incorrect CPU for Cisco devices in the SolarWinds Platform (site.com)