Palo vm-series cloudwatch plugin no metrics

MGT_LIBEJ — Wed, 28 Jan 2026 22:52:48 GMT

Hi all,

I’m trying to get my Palo Alto VM-Series firewall metrics to appear in CloudWatch, but nothing is showing up. I’ve verified the following:

Trust Policy

Permission policy:

The VM logs are showing this:

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloud service hash: {'enabled': 'yes', 'name': 'VMSeries-Palo'}

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch timeout not in configuration.Defaulting to 5

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:48:30.292 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:53:32.189 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:58:34.203 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 20:03:36.093 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 20:08:38.108 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

Has anyone run into this before or knows what else I can check to get the metrics flowing?

Thanks in advance!

topic Palo vm-series cloudwatch plugin no metrics in VM-Series in the Public Cloud