CPU Values on orion and Palo alto device is mismatching

Dataplane CPU and Management CPU metrics are different OIDs. You can use a Universal Device Poller or a SAM template to grab these metrics.  

CPU Management Plane - SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.1

CPU Dataplane System Function -  SNMP Monitor - 1.3.6.1.2.1.25.3.3.1.2.2

Percent Session Utilization - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.3.1.0

Total Active Sessions - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.3.3.0

Active TCP Sessions - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.3.4.0

Active UDP Sessions - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.3.5.0

Active ICMP Sessions - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.3.6.0

Active GlobalProtect GW Tunnels - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.5.1.3

Max GlobalProtect GW Tunnels - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.5.1.2

GlobalProtect GHE Percent Util - SNMP Monitor - 1.3.6.1.4.1.25461.2.1.2.5.1.1

My basic Palo Alto UnDP - Universal Device Pollers - Network Performance Monitor - THWACK - SolarWinds Community

There are SAM templates available that use the SNMP component to poll these metrics.

Hi Steven,

I have created a UNDP using 1.3.6.1.2.1.25.3.3.1.2.2 OID as well for data plane CPU utilization, But the value is still not matching with what we see on Palo alto console.

Sorry to hear that. You may need to open a case with Palo Alto to ask what OID you should be pulling. It may change depending on your version. 

Knowledge: SNMP for Monitoring Palo Alto Networks Devices  Looks like the Dataplane utilization OID is the avg over the last 60 seconds if that helps.

Thanks steven, We have checked with Palo alto as well and they said they are using the same OID which we are using.

Yes