Extend the platform,
empower your team.
Palo Alto extension for problems detection
ExtensionPalo Alto monitoring extension is built on top of the new Extension Framework. Extension package contains:
Monitor health state and performance of your Palo Alto firewalls and provide unified analysis for Ops, DevOps and IT Admins.
Simply activate the extension in your environment using in-product Hub, provide the device configuration and you’re all set up.
Read more in the SNMP Extension Documentation
This extension is built on top of the new Extension 2.0 Framework.
The extension package contains:
More information can be found in the Product News Blog:
Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual metrics can be activated and deactivated by your administrator during configuration.
Metric name | Metric key | Description | Unit |
---|---|---|---|
System uptime | com.dynatrace.extension.palo-alto.generic.sys.uptime | - | MilliSecond |
CPU Management Plane Utilization | com.dynatrace.extension.palo-alto.generic.cpu.management.utilization | - | Percent |
CPU System Plane Utilization | com.dynatrace.extension.palo-alto.generic.cpu.system.utilization | - | Percent |
- | com.dynatrace.extension.palo-alto.generic.device.entity | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.entity | - | - |
Sensor Value | com.dynatrace.extension.palo-alto.generic.sensor.value | - | Unspecified |
Memory Size | com.dynatrace.extension.palo-alto.generic.mem.size | - | Byte |
Memory Used | com.dynatrace.extension.palo-alto.generic.mem.used | - | Byte |
Metric name | Metric key | Description | Unit |
---|---|---|---|
VSYS - Max Sessions | com.dynatrace.extension.palo-alto.generic.vsys.sessions.max | - | Count |
VSYS - Active Sessions | com.dynatrace.extension.palo-alto.generic.vsys.sessions.active | - | Count |
VSYS - Session Utilization | com.dynatrace.extension.palo-alto.generic.vsys.sessions.utilization | - | Percent |
Metric name | Metric key | Description | Unit |
---|---|---|---|
- | com.dynatrace.extension.palo-alto.generic.if.in.octets | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.out.octets | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.in.err | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.out.err | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.in.discards | - | - |
- | com.dynatrace.extension.palo-alto.generic.if.out.discards | - | - |
Metric name | Metric key | Description | Unit |
---|---|---|---|
Active Tunnels | com.dynatrace.extension.palo-alto.generic.tunnels.active | - | Count |
Max Tunnels | com.dynatrace.extension.palo-alto.generic.tunnels.max | - | Count |
Active Sessions | com.dynatrace.extension.palo-alto.generic.sessions.active | - | Count |
Max Sessions | com.dynatrace.extension.palo-alto.generic.sessions.max | - | Count |
Sessions - TCP | com.dynatrace.extension.palo-alto.generic.sessions.tcp | - | Count |
Sessions - UDP | com.dynatrace.extension.palo-alto.generic.sessions.udp | - | Count |
Sessions - ICMP | com.dynatrace.extension.palo-alto.generic.sessions.icmp | - | Count |
Fixed bug where metrics weren't being picked up in management zones with Palo Alto entities.
Dropped support for 32-bit counter octet in/out interface metrics. Only 64-bit counters are now supported. Only devices with Firewall PAN-OS version earlier than 8.1 will be affected.
The interface_high_capacity
feature set was dropped as those metrics are now in the interface
feature set. Before being able to upgrade your monitoring configurations you will need to manually disable the interface-high-capacity
on those configurations (if enabled).
The following metrics of the interface_high_capacity
feature set are renamed
com.dynatrace.extension.palo-alto.generic.if.in.octets
to com.dynatrace.extension.palo-alto.generic.if.hc.in.octets
com.dynatrace.extension.palo-alto.generic.if.out.octets
to com.dynatrace.extension.palo-alto.generic.if.hc.out.octets
com.dynatrace.extension.palo-alto.generic.if.in.err
to com.dynatrace.extension.palo-alto.generic.if.hc.in.err
com.dynatrace.extension.palo-alto.generic.if.out.err
to com.dynatrace.extension.palo-alto.generic.if.hc.out.err
com.dynatrace.extension.palo-alto.generic.if.in.discards
to com.dynatrace.extension.palo-alto.generic.if.hc.in.discards
com.dynatrace.extension.palo-alto.generic.if.out.discards
to com.dynatrace.extension.palo-alto.generic.if.hc.out.discards
Any dashboards or metric events relying on these metrics will need to be reconfigured.
Customers not using the interface_high_capacity
feature set are not affected.
Renamed high capacity interface metrics, to fix a bug where having both the interface
and interface_high_capacity
feature sets enabled at the same time would cause inaccurate metrics to be ingested.
No release notes
No release notes
Fix for dashboard to be compatible with feature flags
Substract of suffix ".count" in metric com.dynatrace.extension.palo-alto.generic.sys.uptime and changed it type to gauge
New calculated metrics:
Corrected oid for dimension: if.keyx
New dimension if.descr for subgroup interface
Added topology, relationships and screens
Version 0.1.15 (initial):