Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Creating alert on Palo Alto Management Plane CPU

I'm trying to create an alert whenever a Palo Alto management plane CPU reaches a specific threshold. I can create an alert for the overall CPU utilization but not for the individual management and data plane CPUs. If I use the Palo Alto poller and insert the Palo Alto OID for the management plane CPU, the configuration tells me that the OID is not valid. If I take the last digit off of the OID, it allows this and shows me the overall CPU use. I've tried creating a custom poller using the Palo Alto OIDs but I can't get that to work either. Has anyone had success with this? Would updating the MB database help?

Thanks

Ken

Find more posts tagged with

Accepted answers

stevenstadel

You need to setup a New Universal Device Poller to retrieve the OID using the UnDP program on the polling engine. metric. https://documentation.solarwinds.com/en/success_center/npm/content/core-monitoring-mibs-with-universal-device-pollers-sw548.htm

This is different from changing the sysobjectid. in the GUI. You then test your new UnDP Poller against a Palo Alto to make sure you are retrieving the CPU metric.

All comments

stevenstadel

Try this App Template to pull the different CPU (Dataplane vs Management) - Palo Alto Metrics - Application Monitor Templates - Server & Application Monitor - THWACK (solarwinds.com)

I personally prefer using SAM, if possible, for polling SNMP because I can get more advanced features like using Baseline Metrics.

If you need to use UnDP these are the OIDs that work for us.

CPU Management Plane - SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.1

CPU Dataplane System Function - SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.2

kmkrause23

Thanks for the response. Is this script something that is run against the PaloAlto API? What is SAM?

The OIDs you mentioned are the ones I have been using in the custom poller i created, but whenever I apply that poller to the alert, Solarwinds always states in the alert summary that there are 0 devices that would trigger the alert. I have the threshold set at 1% for testing, so I know that's not correct.

stevenstadel

SAM is Server and Application Monitor. When creating an alert you would reference the SAM application monitor that was created and put the thresholds directly in that template. If you are alerting off of your UnDP poller you would set the alert to be Custom Node Poller.

Are you seeing values being polled for the Dataplane CPU from your custom poller?

Can you share a screenshot of your alert definition?

kmkrause23

I have the alert disabled at the moment and I turn it on when I'm testing. Here's a shot of the custom poller also.