I need to get report of Two VPN Tunnel how many times it might of disconnect 1 month.anybody can point to right direction?in the report i didn't see a monitor for interface.Do I need custom SQL or SWQL to make the report?
I've not tried this myself but you almost certainly will need to create a UnDP to extract the relevant data from an OID on the Palo Alto that provides this.
Once that is done, reporting on it should be reasonably straightforward.