zabbix_export: version: '5.4' date: '2021-11-21T21:51:02Z' groups: - uuid: d5b9056be62f431db8b7267f8cf22db3 name: 'Templates Generic' templates: - uuid: 7e289beedec04913b25f9672c61864fe template: 'Palo Alto SNMPv2 64-bit counters' name: 'Palo Alto SNMPv2 64-bit counters' description: | ## Overview Hi everyone, I created this template because i updated two Palo Alto from 8.1.4 to 9.0.3 and some counter went from 32 to 64bits I just modified the template below from Pavol Rehak so check it out (for details details and trap configuration) : [https://share.zabbix.com/network\_devices/palo-alto/paloalto-snmpv3-zabbix4-0](network_devices/palo-alto/paloalto-snmpv3-zabbix4-0) I changed all snmpv3 to snmpv2 and added graphs for discovered interface traffic (in & out) I had some error on storage discovery too that i fixed ### NAME : Template Palo Alto SNMPv2 64-bit counters ### TESTED : zabbix 4.2 and PAN OS 9.0.3-h3 but should work on zabbix 3.4 and PAN OS 8.1 ## Author Remi Chanoine groups: - name: 'Templates Generic' items: - uuid: 075b260bed6240b7be578533fce5359a name: Uptime type: SNMP_AGENT snmp_oid: .1.3.6.1.2.1.25.1.1.0 key: hrSystemUptime.0 history: 7d units: s description: '"The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system."' preprocessing: - type: MULTIPLIER parameters: - '0.01' tags: - tag: Application value: 'System specification' - uuid: ad35cc315b8f4f61a519c5f94d8e4030 name: 'HA mode' type: SNMP_AGENT snmp_oid: 1.3.6.1.4.1.25461.2.1.2.1.13.0 key: panSysHAMode.0 delay: 12h history: 7d trends: '0' value_type: TEXT description: 'Current high-availability peer state.' tags: - tag: Application value: 'High availability' - uuid: 13b00c42199d453b95eb37a283d5beef name: 'HA peer state' type: SNMP_AGENT snmp_oid: 1.3.6.1.4.1.25461.2.1.2.1.12.0 key: panSysHAPeerState.0 history: 7d trends: '0' value_type: TEXT description: 'Current high-availability peer state.' tags: - tag: Application value: 'High availability' - uuid: fab7d4f4965b414db7d1dd516792e63a name: 'HA state' type: SNMP_AGENT snmp_oid: 1.3.6.1.4.1.25461.2.1.2.1.11.0 key: panSysHAState.0 history: 7d trends: '0' value_type: TEXT description: 'Current high-availability state.' tags: - tag: Application value: 'High availability' - uuid: 82e60e4d46614af4bcfd94a47ad425b0 name: 'Undefined traps' type: SNMP_TRAP key: snmptrap.fallback delay: '0' history: 7d trends: '0' value_type: LOG logtimefmt: 'hh:mm:ss yyyy/MM/dd' tags: - tag: Application value: Traps - uuid: baa6fa1da42d4dcab63ef37c1fd0f938 name: 'General trap' type: SNMP_TRAP key: 'snmptrap["General trap"]' delay: '0' history: 7d trends: '0' value_type: LOG logtimefmt: 'hh:mm:ss yyyy/MM/dd' tags: - tag: Application value: Traps triggers: - uuid: e20d5de6a9a841d39e91c004a235a11a expression: 'find(/Palo Alto SNMPv2 64-bit counters/snmptrap["General trap"],#1,"like","System restart")=1' recovery_mode: RECOVERY_EXPRESSION recovery_expression: 'find(/Palo Alto SNMPv2 64-bit counters/snmptrap["General trap"],#1,"like","Dataplane is now up")=1' name: 'System restart' priority: HIGH - uuid: c3a3f559301b448cbe3e5e2e70c32082 name: 'HA status trap' type: SNMP_TRAP key: 'snmptrap["HA link change"]' delay: '0' history: 7d trends: '0' value_type: LOG logtimefmt: 'hh:mm:ss yyyy/MM/dd' tags: - tag: Application value: Traps triggers: - uuid: 9cb2355810dd480b8e4412f2586114bc expression: 'find(/Palo Alto SNMPv2 64-bit counters/snmptrap["HA link change"],#1,"like","link down")=1' recovery_mode: RECOVERY_EXPRESSION recovery_expression: 'find(/Palo Alto SNMPv2 64-bit counters/snmptrap["HA link change"],#1,"like","link up")=1' name: 'HA link status critical' priority: HIGH - uuid: c3a510886cd348c1aa8273aa384e5fab name: 'System shutdown' type: SNMP_TRAP key: 'snmptrap["System shutdown"]' delay: '0' history: 7d trends: '0' value_type: LOG logtimefmt: 'hh:mm:ss yyyy/MM/dd' tags: - tag: Application value: Traps - uuid: bb2711e6be764c6fba9c99f4049cc26e name: 'Device description' type: SNMP_AGENT snmp_oid: .1.3.6.1.2.1.1.1.0 key: sysDescr.0 delay: 1d history: 7d trends: '0' value_type: TEXT description: 'A textual description of the entity. This value should include the full name and version identification of the system''s hardware type, software operating-system, and networking software. It is mandatory that this only contain printable ASCII characters.' inventory_link: OS_FULL tags: - tag: Application value: 'System specification' - uuid: 512f22b9ca5a4d028138e3d770502b83 name: Hostname type: SNMP_AGENT snmp_oid: .1.3.6.1.2.1.1.5.0 key: sysName.0 delay: 1d history: 7d trends: '0' value_type: TEXT description: 'An administratively-assigned name for this managed node. By convention, this is the node''s fully-qualified domain name.' tags: - tag: Application value: 'System specification' discovery_rules: - uuid: 1777300c3676497b9cc0d6894c04f6de name: 'entPhysical discovery - Temperature' type: SNMP_AGENT snmp_oid: 'discovery[{#PHY},1.3.6.1.2.1.47.1.1.1.1.7]' key: entPhysicalName.discovery delay: 1d filter: conditions: - macro: '{#PHY}' value: '.*(Temperature).*' formulaid: A item_prototypes: - uuid: ab3041481dee4dd3ba12b4c459298ea7 name: '$1 opration status' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.99.1.1.1.5.{#SNMPINDEX}' key: 'entPhySensorOperStatus.["{#PHY}"]' history: 7d description: '"The operational status of the sensor."' valuemap: name: EntitySensorStatus tags: - tag: Application value: 'HW status - Temperature' trigger_prototypes: - uuid: d219d05d1e434d12acae627d1b39a4cf expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorOperStatus.["{#PHY}"])<>1' name: '{#PHY} sensor status not ok' priority: AVERAGE - uuid: d52fe8d8b7404d06975478bef96c1479 name: '$1 sensor value' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.99.1.1.1.4.{#SNMPINDEX}' key: 'entPhySensorValue.["{#PHY}"]' history: 7d units: °C description: 'The most recent measurement obtained by the agent for this sensor.' tags: - tag: Application value: 'HW status - Temperature' trigger_prototypes: - uuid: 51737838ccc3403691a48d61acd68f14 expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorValue.["{#PHY}"])>65' name: '{#PHY} temperature above 65 °C' priority: AVERAGE dependencies: - name: '{#PHY} temperature above 70 °C' expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorValue.["{#PHY}"])>70' - uuid: d1d66ea1cf344a5aa533248a1eb450e2 expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorValue.["{#PHY}"])>70' name: '{#PHY} temperature above 70 °C' priority: HIGH dependencies: - name: '{#PHY} temperature above 80 °C' expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorValue.["{#PHY}"])>80' - uuid: d3be8f95bc454bde87b385f2e4653970 expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorValue.["{#PHY}"])>80' name: '{#PHY} temperature above 80 °C' priority: DISASTER - uuid: d4f2e616fb804f46a2fe1b6edae06384 name: '$1 class' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.47.1.1.1.1.5.{#SNMPINDEX}' key: 'entPhysicalClass.["{#PHY}"]' history: 7d valuemap: name: entPhysicalClass request_method: POST tags: - tag: Application value: 'HW status - Temperature' - uuid: ba5c9932fd794a3d8207c57239f943d3 name: '$1 sensor description' type: SNMP_AGENT snmp_oid: '1.3.6.1.2.1.47.1.1.1.1.2.{#SNMPINDEX}' key: 'entPhysicalDescr.["{#PHY}"]' delay: 1d history: 7d trends: '0' value_type: TEXT request_method: POST tags: - tag: Application value: 'HW status - Temperature' request_method: POST - uuid: 78cc9a22ff72490dae151f5e94a1b074 name: 'entPhysical discovery - Fan' type: SNMP_AGENT snmp_oid: 'discovery[{#PHY},1.3.6.1.2.1.47.1.1.1.1.7]' key: entPhysicalName.discovery.fan delay: 1d filter: conditions: - macro: '{#PHY}' value: '.*(RPM).*' formulaid: A item_prototypes: - uuid: 03267b8dd52d4540a945a321ca95b69f name: '$1 opration status' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.99.1.1.1.5.{#SNMPINDEX}' key: 'entPhySensorOperStatus.fan.["{#PHY}"]' history: 7d valuemap: name: EntitySensorStatus tags: - tag: Application value: 'HW status - Fan' trigger_prototypes: - uuid: 8f2e8b48e8894500b8ae2cc63c0b1ee6 expression: 'last(/Palo Alto SNMPv2 64-bit counters/entPhySensorOperStatus.fan.["{#PHY}"])<>1' name: '{#PHY} sensor status not ok' priority: AVERAGE - uuid: b68810b5d65e4f0eb571ef4148bbb3ed name: '$1 sensor value' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.99.1.1.1.4.{#SNMPINDEX}' key: 'entPhySensorValue.fan.["{#PHY}"]' history: 7d units: RPM tags: - tag: Application value: 'HW status - Fan' - uuid: 1d9322319ae2488d9d69c8f63590e6d1 name: '$1 class' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.47.1.1.1.1.5.{#SNMPINDEX}' key: 'entPhysicalClass.fan.["{#PHY}"]' history: 7d valuemap: name: entPhysicalClass tags: - tag: Application value: 'HW status - Fan' - uuid: 1a2b11422025400da2cf5680c66823a7 name: '$1 sensor description' type: SNMP_AGENT snmp_oid: '1.3.6.1.2.1.47.1.1.1.1.2.{#SNMPINDEX}' key: 'entPhysicalDescr.fan.["{#PHY}"]' delay: 1d history: 7d trends: '0' value_type: TEXT tags: - tag: Application value: 'HW status - Fan' - uuid: db8cc08f290146a99403c090b3749754 name: 'CPU discovery' type: SNMP_AGENT snmp_oid: 'discovery[{#CPU},.1.3.6.1.2.1.25.3.2.1.3]' key: hrDeviceDescr.discovery delay: 1d item_prototypes: - uuid: 33e98b3c2a4346debd5c97710f1e5dbc name: '{#CPU} status' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.25.3.2.1.5.{#SNMPINDEX}' key: 'hrDeviceStatus.["{#CPU}"]' history: 7d description: '"The current operational state of the device described by this row of the table. A value unknown(1) indicates that the current state of the device is unknown. running(2) indicates that the device is up and running and that no unusual error conditions are known. The warning(3) state indicates that agent has been informed of an unusual error condition by the operational software (e.g., a disk device driver) but that the device is still ''operational''. An example would be a high number of soft errors on a disk. A value of testing(4), indicates that the device is not available for use because it is in the testing state. The state of down(5) is used only when the agent has been informed that the device is not available for any use."' valuemap: name: hrDeviceStatus tags: - tag: Application value: CPU trigger_prototypes: - uuid: 2859581a44694b1494ce25b034d32a57 expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrDeviceStatus.["{#CPU}"])=5' name: '{#CPU} status down' priority: AVERAGE - uuid: 0639535695dc434688b67b5ba98d80fa expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrDeviceStatus.["{#CPU}"])=3' name: '{#CPU} status warning' priority: WARNING - uuid: 006a84b9b8e449818f9a7c10a597ac21 name: '{#CPU} load - percentage' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.25.3.3.1.2.{#SNMPINDEX}' key: 'hrProcessorLoad.["{#CPU}"]' history: 7d value_type: FLOAT units: '%' description: '"The average, over the last minute, of the percentage of time that this processor was not idle. Implementations may approximate this one minute smoothing period if necessary."' tags: - tag: Application value: CPU trigger_prototypes: - uuid: f9267d5df2a74bf1af0472c20e86a3d4 expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrProcessorLoad.["{#CPU}"])>90' name: 'CPU load on {#CPU} more than 90%' priority: AVERAGE dependencies: - name: 'CPU load on {#CPU} more than 95%' expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrProcessorLoad.["{#CPU}"])>95' - uuid: 04efd9f384fe4c6b9f751f195a49059e expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrProcessorLoad.["{#CPU}"])>95' name: 'CPU load on {#CPU} more than 95%' priority: HIGH - uuid: d8f160cf845241ac950ca9d1c7037c5e name: 'hrStorage discovery' type: SNMP_AGENT snmp_oid: 'discovery[{#STOR},.1.3.6.1.2.1.25.2.3.1.3]' key: hrStorageDescr.discovery delay: 1d filter: conditions: - macro: '{#STOR}' value: '^((?!Swap).)*$' formulaid: A item_prototypes: - uuid: 1f5b7c6d3d3744b2aba6b12063ebdf9a name: '$1 storage size' type: SNMP_AGENT snmp_oid: '1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}' key: 'hrStorageSize.["{#STOR}"]' delay: 30m history: 1w units: B preprocessing: - type: MULTIPLIER parameters: - '1024' request_method: POST tags: - tag: Application value: Storage - tag: Application value: Storage_Discovered - uuid: 4312999a9ef54ce0a843d8b5390a2104 name: '$1 storage type' type: SNMP_AGENT snmp_oid: '1.3.6.1.2.1.25.2.3.1.2.{#SNMPINDEX}' key: 'hrStorageType.["{#STOR}"]' delay: 12h history: 1w trends: '0' value_type: TEXT tags: - tag: Application value: Storage - tag: Application value: Storage_Discovered - uuid: 80d3c53829ea4f4bbf53e4462270213d name: '$1 storage used' type: SNMP_AGENT snmp_oid: '1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}' key: 'hrStorageUsed.["{#STOR}"]' history: 1w units: B preprocessing: - type: MULTIPLIER parameters: - '1024' request_method: POST tags: - tag: Application value: Storage - tag: Application value: Storage_Discovered trigger_prototypes: - uuid: be5156a851014480a63d3ac473162076 expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrStorageUsed.["{#STOR}"]) / last(/Palo Alto SNMPv2 64-bit counters/hrStorageSize.["{#STOR}"]) * 100 > 98' name: 'Free disk space is less than 2% on {#STOR}' priority: DISASTER - uuid: 5c0549d7b33a46ca9e9b50be3f929ef5 expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrStorageUsed.["{#STOR}"]) / last(/Palo Alto SNMPv2 64-bit counters/hrStorageSize.["{#STOR}"]) * 100 > 95' name: 'Free disk space is less than 5% on {#STOR}' priority: HIGH dependencies: - name: 'Free disk space is less than 2% on {#STOR}' expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrStorageUsed.["{#STOR}"]) / last(/Palo Alto SNMPv2 64-bit counters/hrStorageSize.["{#STOR}"]) * 100 > 98' - uuid: dbcd66f55c334de5a3681bce7a9acfdf expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrStorageUsed.["{#STOR}"]) / last(/Palo Alto SNMPv2 64-bit counters/hrStorageSize.["{#STOR}"]) * 100 > 90' name: 'Free disk space is less than 10% on {#STOR}' priority: AVERAGE dependencies: - name: 'Free disk space is less than 5% on {#STOR}' expression: 'last(/Palo Alto SNMPv2 64-bit counters/hrStorageUsed.["{#STOR}"]) / last(/Palo Alto SNMPv2 64-bit counters/hrStorageSize.["{#STOR}"]) * 100 > 95' request_method: POST - uuid: a65c600b3735496699cbe52002914fe2 name: 'interface discovery' type: SNMP_AGENT snmp_oid: 'discovery[{#IFNAME},.1.3.6.1.2.1.31.1.1.1.1]' key: ifName.discovery delay: 1d item_prototypes: - uuid: 6839f3f438834ab3bdcb25b967c959a9 name: '$1 admin status' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.2.2.1.7.{#SNMPINDEX}' key: 'ifAdminStatus.["{#IFNAME}"]' delay: 2m history: 7d valuemap: name: 'SNMP interface status (ifAdminStatus)' tags: - tag: Application value: Interfaces - uuid: 16b5340954a54677b6166d6f511cc156 name: '$1 alias (description)' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.31.1.1.1.18.{#SNMPINDEX}' key: 'ifAlias.["{#IFNAME}"]' delay: 6h history: 7d trends: '0' value_type: TEXT tags: - tag: Application value: Interfaces - uuid: 0105c291b3c342238f84ca200e9bc50d name: '$1 input traffic (30 sec)' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}' key: 'ifHCInOctets.["{#IFNAME}"]' delay: 30s history: 7d units: bit/s preprocessing: - type: CHANGE_PER_SECOND parameters: - '' - type: MULTIPLIER parameters: - '8' tags: - tag: Application value: Interfaces - uuid: 72fb52dcf7954981abd888a3d1a6a2d1 name: '$1 output traffic (30 sec)' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}' key: 'ifHCOutOctets.["{#IFNAME}"]' delay: 30s history: 7d units: bit/s preprocessing: - type: CHANGE_PER_SECOND parameters: - '' - type: MULTIPLIER parameters: - '8' tags: - tag: Application value: Interfaces - uuid: 0ea24fa609a44fb8b39d9eac19129e7e name: '$1 link status' type: SNMP_AGENT snmp_oid: '.1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}' key: 'ifOperStatus.["{#IFNAME}"]' delay: 2m history: 7d valuemap: name: 'SNMP interface status (ifOperStatus)' tags: - tag: Application value: Interfaces trigger_prototypes: - uuid: 342f31ec3f0748d1bd210076325c94e9 expression: 'last(/Palo Alto SNMPv2 64-bit counters/ifAdminStatus.["{#IFNAME}"])=1 and last(/Palo Alto SNMPv2 64-bit counters/ifOperStatus.["{#IFNAME}"])=2' name: '{#IFNAME} interface down' priority: HIGH description: 'interface ifAdminStatus is up(1) and ifOperStatus is down(2)' graph_prototypes: - uuid: f14b3a96e99e4514b520f40c7ad4565a name: 'Traffic on {#IFNAME}' yaxismax: '1000000000' ymin_type_1: FIXED ymax_type_1: FIXED graph_items: - drawtype: GRADIENT_LINE color: 199C0D item: host: 'Palo Alto SNMPv2 64-bit counters' key: 'ifHCInOctets.["{#IFNAME}"]' - sortorder: '1' drawtype: GRADIENT_LINE color: 0040FF item: host: 'Palo Alto SNMPv2 64-bit counters' key: 'ifHCOutOctets.["{#IFNAME}"]' valuemaps: - uuid: fe4941f2ff8349ba839a6b18920930a3 name: EntitySensorStatus mappings: - value: '1' newvalue: ok - value: '2' newvalue: unavailable - value: '3' newvalue: nonoperational - uuid: 89ec78120ab8494fbcdba11364f35589 name: entPhysicalClass mappings: - value: '1' newvalue: other - value: '2' newvalue: unknown - value: '3' newvalue: chassis - value: '4' newvalue: backplane - value: '5' newvalue: container - value: '6' newvalue: powerSupply - value: '7' newvalue: fan - value: '8' newvalue: sensor - value: '9' newvalue: module - value: '10' newvalue: port - value: '11' newvalue: stack - uuid: 65768e6ab590414fa30b606806347709 name: hrDeviceStatus mappings: - value: '1' newvalue: unknown - value: '2' newvalue: running - value: '3' newvalue: warning - value: '4' newvalue: testing - value: '5' newvalue: down - uuid: c38cd0feeb034f15b9e1120088113f7f name: 'SNMP interface status (ifAdminStatus)' mappings: - value: '1' newvalue: up - value: '2' newvalue: down - value: '3' newvalue: testing - uuid: 901d51d1602f4d079b41448c08e333c7 name: 'SNMP interface status (ifOperStatus)' mappings: - value: '1' newvalue: up - value: '2' newvalue: down - value: '3' newvalue: testing - value: '4' newvalue: unknown - value: '5' newvalue: dormant - value: '6' newvalue: notPresent - value: '7' newvalue: lowerLayerDown