5.02021-11-21T21:51:00ZTemplates GenericPalo Alto SNMPv2 64-bit countersPalo Alto SNMPv2 64-bit counters## Overview
Hi everyone,
I created this template because i updated two Palo Alto from 8.1.4 to 9.0.3 and some counter went from 32 to 64bits
I just modified the template below from Pavol Rehak so check it out (for details details and trap configuration) :
[https://share.zabbix.com/network\_devices/palo-alto/paloalto-snmpv3-zabbix4-0](network_devices/palo-alto/paloalto-snmpv3-zabbix4-0)
I changed all snmpv3 to snmpv2 and added graphs for discovered interface traffic (in & out)
I had some error on storage discovery too that i fixed
###
NAME : Template Palo Alto SNMPv2 64-bit counters
###
TESTED : zabbix 4.2 and PAN OS 9.0.3-h3 but should work on zabbix 3.4 and PAN OS 8.1
## Author
Remi Chanoine
Templates GenericCPUHigh availabilityHW status - FanHW status - TemperatureInterfacesSensorsStorageSystem specificationTraps- UptimeSNMP_AGENT.1.3.6.1.2.1.25.1.1.0hrSystemUptime.07ds"The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system."System specificationMULTIPLIER0.01
- HA modeSNMP_AGENT1.3.6.1.4.1.25461.2.1.2.1.13.0panSysHAMode.012h7d0TEXTCurrent high-availability peer state.High availability
- HA peer stateSNMP_AGENT1.3.6.1.4.1.25461.2.1.2.1.12.0panSysHAPeerState.07d0TEXTCurrent high-availability peer state.High availability
- HA stateSNMP_AGENT1.3.6.1.4.1.25461.2.1.2.1.11.0panSysHAState.07d0TEXTCurrent high-availability state.High availability
- Undefined trapsSNMP_TRAPsnmptrap.fallback07d0LOGTrapshh:mm:ss yyyy/MM/dd
- General trapSNMP_TRAPsnmptrap["General trap"]07d0LOGTrapshh:mm:ss yyyy/MM/dd{str(System restart,#1)}=1RECOVERY_EXPRESSION{str(Dataplane is now up,#1)}=1System restartHIGH
- HA status trapSNMP_TRAPsnmptrap["HA link change"]07d0LOGTrapshh:mm:ss yyyy/MM/dd{str(link down,#1)}=1RECOVERY_EXPRESSION{str(link up,#1)}=1HA link status criticalHIGH
- System shutdownSNMP_TRAPsnmptrap["System shutdown"]07d0LOGTrapshh:mm:ss yyyy/MM/dd
- Device descriptionSNMP_AGENT.1.3.6.1.2.1.1.1.0sysDescr.01d7d0TEXTA textual description of the entity. This value should include the full name and version identification of the system's hardware type, software operating-system, and networking software. It is mandatory that this only contain printable ASCII characters.OS_FULLSystem specification
- HostnameSNMP_AGENT.1.3.6.1.2.1.1.5.0sysName.01d7d0TEXTAn administratively-assigned name for this managed node. By convention, this is the node's fully-qualified domain name.System specification
entPhysical discovery - TemperatureSNMP_AGENTdiscovery[{#PHY},1.3.6.1.2.1.47.1.1.1.1.7]entPhysicalName.discovery1d{#PHY}.*(Temperature).*A$1 opration statusSNMP_AGENT.1.3.6.1.2.1.99.1.1.1.5.{#SNMPINDEX}entPhySensorOperStatus.["{#PHY}"]7d"The operational status of the sensor."HW status - TemperatureEntitySensorStatus{last()}<>1{#PHY} sensor status not okAVERAGE$1 sensor valueSNMP_AGENT.1.3.6.1.2.1.99.1.1.1.4.{#SNMPINDEX}entPhySensorValue.["{#PHY}"]7d°CThe most recent measurement obtained by the agent for this sensor.HW status - Temperature{last()}>65{#PHY} temperature above 65 °CAVERAGE{#PHY} temperature above 70 °C{Palo Alto SNMPv2 64-bit counters:entPhySensorValue.["{#PHY}"].last()}>70{last()}>70{#PHY} temperature above 70 °CHIGH{#PHY} temperature above 80 °C{Palo Alto SNMPv2 64-bit counters:entPhySensorValue.["{#PHY}"].last()}>80{last()}>80{#PHY} temperature above 80 °CDISASTER$1 classSNMP_AGENT.1.3.6.1.2.1.47.1.1.1.1.5.{#SNMPINDEX}entPhysicalClass.["{#PHY}"]7dHW status - TemperatureentPhysicalClassPOST$1 sensor descriptionSNMP_AGENT1.3.6.1.2.1.47.1.1.1.1.2.{#SNMPINDEX}entPhysicalDescr.["{#PHY}"]1d7d0TEXTHW status - TemperaturePOSTPOSTentPhysical discovery - FanSNMP_AGENTdiscovery[{#PHY},1.3.6.1.2.1.47.1.1.1.1.7]entPhysicalName.discovery.fan1d{#PHY}.*(RPM).*A$1 opration statusSNMP_AGENT.1.3.6.1.2.1.99.1.1.1.5.{#SNMPINDEX}entPhySensorOperStatus.fan.["{#PHY}"]7dHW status - FanEntitySensorStatus{last()}<>1{#PHY} sensor status not okAVERAGE$1 sensor valueSNMP_AGENT.1.3.6.1.2.1.99.1.1.1.4.{#SNMPINDEX}entPhySensorValue.fan.["{#PHY}"]7dRPMHW status - Fan$1 classSNMP_AGENT.1.3.6.1.2.1.47.1.1.1.1.5.{#SNMPINDEX}entPhysicalClass.fan.["{#PHY}"]7dHW status - FanentPhysicalClass$1 sensor descriptionSNMP_AGENT1.3.6.1.2.1.47.1.1.1.1.2.{#SNMPINDEX}entPhysicalDescr.fan.["{#PHY}"]1d7d0TEXTHW status - FanCPU discoverySNMP_AGENTdiscovery[{#CPU},.1.3.6.1.2.1.25.3.2.1.3]hrDeviceDescr.discovery1d{#CPU} statusSNMP_AGENT.1.3.6.1.2.1.25.3.2.1.5.{#SNMPINDEX}hrDeviceStatus.["{#CPU}"]7d"The current operational state of the device described by this row of the table. A value unknown(1) indicates that the current state of the device is unknown. running(2) indicates that the device is up and running and that no unusual error conditions are known. The warning(3) state indicates that agent has been informed of an unusual error condition by the operational software (e.g., a disk device driver) but that the device is still 'operational'. An example would be a high number of soft errors on a disk. A value of testing(4), indicates that the device is not available for use because it is in the testing state. The state of down(5) is used only when the agent has been informed that the device is not available for any use."CPUhrDeviceStatus{last()}=5{#CPU} status downAVERAGE{last()}=3{#CPU} status warningWARNING{#CPU} load - percentageSNMP_AGENT.1.3.6.1.2.1.25.3.3.1.2.{#SNMPINDEX}hrProcessorLoad.["{#CPU}"]7dFLOAT%"The average, over the last minute, of the percentage of time that this processor was not idle. Implementations may approximate this one minute smoothing period if necessary."CPU{last()}>90CPU load on {#CPU} more than 90%AVERAGECPU load on {#CPU} more than 95%{Palo Alto SNMPv2 64-bit counters:hrProcessorLoad.["{#CPU}"].last()}>95{last()}>95CPU load on {#CPU} more than 95%HIGHhrStorage discoverySNMP_AGENTdiscovery[{#STOR},.1.3.6.1.2.1.25.2.3.1.3]hrStorageDescr.discovery1d{#STOR}^((?!Swap).)*$A$1 storage sizeSNMP_AGENT1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}hrStorageSize.["{#STOR}"]30m1wBStorageStorage_DiscoveredMULTIPLIER1024POST$1 storage typeSNMP_AGENT1.3.6.1.2.1.25.2.3.1.2.{#SNMPINDEX}hrStorageType.["{#STOR}"]12h1w0TEXTStorageStorage_Discovered$1 storage usedSNMP_AGENT1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}hrStorageUsed.["{#STOR}"]1wBStorageStorage_DiscoveredMULTIPLIER1024POST{Palo Alto SNMPv2 64-bit counters:hrStorageUsed.["{#STOR}"].last()} / {Palo Alto SNMPv2 64-bit counters:hrStorageSize.["{#STOR}"].last()} * 100 > 98Free disk space is less than 2% on {#STOR}DISASTER{Palo Alto SNMPv2 64-bit counters:hrStorageUsed.["{#STOR}"].last()} / {Palo Alto SNMPv2 64-bit counters:hrStorageSize.["{#STOR}"].last()} * 100 > 95Free disk space is less than 5% on {#STOR}HIGHFree disk space is less than 2% on {#STOR}{Palo Alto SNMPv2 64-bit counters:hrStorageUsed.["{#STOR}"].last()} / {Palo Alto SNMPv2 64-bit counters:hrStorageSize.["{#STOR}"].last()} * 100 > 98{Palo Alto SNMPv2 64-bit counters:hrStorageUsed.["{#STOR}"].last()} / {Palo Alto SNMPv2 64-bit counters:hrStorageSize.["{#STOR}"].last()} * 100 > 90Free disk space is less than 10% on {#STOR}AVERAGEFree disk space is less than 5% on {#STOR}{Palo Alto SNMPv2 64-bit counters:hrStorageUsed.["{#STOR}"].last()} / {Palo Alto SNMPv2 64-bit counters:hrStorageSize.["{#STOR}"].last()} * 100 > 95POSTinterface discoverySNMP_AGENTdiscovery[{#IFNAME},.1.3.6.1.2.1.31.1.1.1.1]ifName.discovery1d$1 admin statusSNMP_AGENT.1.3.6.1.2.1.2.2.1.7.{#SNMPINDEX}ifAdminStatus.["{#IFNAME}"]2m7dInterfacesSNMP interface status (ifAdminStatus)$1 alias (description)SNMP_AGENT.1.3.6.1.2.1.31.1.1.1.18.{#SNMPINDEX}ifAlias.["{#IFNAME}"]6h7d0TEXTInterfaces$1 input traffic (30 sec)SNMP_AGENT.1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}ifHCInOctets.["{#IFNAME}"]30s7dbit/sInterfacesCHANGE_PER_SECONDMULTIPLIER8$1 output traffic (30 sec)SNMP_AGENT.1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}ifHCOutOctets.["{#IFNAME}"]30s7dbit/sInterfacesCHANGE_PER_SECONDMULTIPLIER8$1 link statusSNMP_AGENT.1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}ifOperStatus.["{#IFNAME}"]2m7dInterfacesSNMP interface status (ifOperStatus){Palo Alto SNMPv2 64-bit counters:ifAdminStatus.["{#IFNAME}"].last()}=1 and {Palo Alto SNMPv2 64-bit counters:ifOperStatus.["{#IFNAME}"].last()}=2{#IFNAME} interface downHIGHinterface ifAdminStatus is up(1) and ifOperStatus is down(2)Traffic on {#IFNAME}1000000000FIXEDFIXEDGRADIENT_LINE199C0D- Palo Alto SNMPv2 64-bit countersifHCInOctets.["{#IFNAME}"]
1GRADIENT_LINE0040FF- Palo Alto SNMPv2 64-bit countersifHCOutOctets.["{#IFNAME}"]
EntitySensorStatus1ok2unavailable3nonoperationalentPhysicalClass1other2unknown3chassis4backplane5container6powerSupply7fan8sensor9module10port11stackhrDeviceStatus1unknown2running3warning4testing5downSNMP interface status (ifAdminStatus)1up2down3testingSNMP interface status (ifOperStatus)1up2down3testing4unknown5dormant6notPresent7lowerLayerDown