Palo Alto HA Firewall Failover Poller

This poller checks OID 1.3.6.1.4.1.25461.2.1.2.1.11, panSysHAState to detect if the target firewall is in active or passive mode.  This poller is intended to be used in conjunction with Advanced Alert Manager alerts which trigger based on the text value returned ("passive" or "active"). Use one alert for the primary peer of the HA pair using:

Trigger when all of the following apply:

     Poller Name is equal to panSysHAState

     Value contains passive

For an alert to trigger verifying that the secondary peer has become active apply the poller to the secondary firewall and use:

Trigger when all of the following apply:

     Poller Name is equal to panSysHAState

     Value contains active

Note that you may use 1.3.6.1.4.1.25461.2.1.2.1.12, panSysHAPeerState to check the state of the HA peer partner from the primary, but this will require 2 pollers and more complex alert logic.