I'm getting false positives using the out of box Palo Alto VPN Tunnel down alert. I'm looking for a way to alert on the IKE Phase instead of the IPSEC status.