Palo Alto alerting via Solarwinds for BGP/Dynamic routing

HI

   I need to be able to do some Dynamic routing alerting via solarwinds for Palo Alto firewalls in particular bgp peers if the it drops or flaps.  Is there a method of doing this via Solarwinds?

Parents
  • mliveri​ 0 I have several Palo Altos and do some custom thing with them. I don't have BGP peers but I am interested in helping you solve this. What version of PAN OS are you running? KMSigma​ let me know about your question.

  • Specifically for the BGP peer status you might consider a HTTP/HTTPS monitor in Solarwinds and use the Palo Alto API. Then if it does not return the peer-status you expect in the XML response trigger an alert in SolarWinds.

    Start on this page: Get Started with the PAN-OS XML API

    pastedImage_1.pngpastedImage_2.pngpastedImage_3.png

    You can construct a query that looks like this:

    https://firewall.foobar.com/api/?type=op&cmd=%3Cshow%3E%3Crouting%3E%3Cprotocol%3E%3Cbgp%3E%3Cpeer%3E%3Cvirtual-router%3E[virtual router name]%3C%2Fvirtual-router%3E%3C%2Fpeer%3E%3C%2Fbgp%3E%3C%2Fprotocol%3E%3C%2Frouting%3E%3C%2Fshow%3E&key=[account api key]

    The response I get on my system is this because I have no peers:

    pastedImage_4.png

    The routing table can be retrieved similarly although I do not know of a good way to parse the XML and use it in SolarWInds. I am still looking into that. Mostly I have used this in other prorams I write to output the XML into a spreadsheet for others to use.

    Here is the routing table API query:

    https://firewall.foobar.com/api/?type=op&cmd=&%3Cshow%3E%3Crouting%3E%3Croute%3E%3Cvirtual-router%3E[virutal router name]%3C%2Fvirtual-router%3E%3C%2Froute%3E%3C%2Frouting%3E%3C%2Fshow%3Ekey=[account api key]

    The partial result looks like this:

    pastedImage_5.png

  •  

    Hi , Thanks for your post but still this is not resolving our issue to get monitor on BGP status and Power supply status of Palo alto devices by using API call from solarwinds. As we do not have SAM module we have only network monitoring modules in solarwinds.

    How can we monitor by using API 

    Power supply and BGP peer state Monitoring on Palo Alto devices 
Reply
  •  

    Hi , Thanks for your post but still this is not resolving our issue to get monitor on BGP status and Power supply status of Palo alto devices by using API call from solarwinds. As we do not have SAM module we have only network monitoring modules in solarwinds.

    How can we monitor by using API 

    Power supply and BGP peer state Monitoring on Palo Alto devices 
Children
No Data