topic Re: Cortex VM Broker SNMP monitoring in Cortex XDR Discussions

Cortex VM Broker SNMP monitoring

GSandbrand — Tue, 08 Apr 2025 06:39:21 GMT

Hello guys,

i would like to know if it's possible pour monitoring the VM broker with snmp protocol ?

i need to add this VM to my PRTG server, but i can't do it !

Best regards,

Grégory

Re: Cortex VM Broker SNMP monitoring

aspatil — Wed, 09 Apr 2025 13:21:42 GMT

Hello @GSandbrand ,

The Broker VM is a hardened virtual appliance, purpose-built to act as a secure relay for data ingestion (e.g., Syslog, Traps, Directory Sync, etc.) in Cortex XDR.

Palo Alto Networks intentionally restricts access and services running on the VM to reduce the attack surface.

SNMP is not enabled on the Broker VM, nor is there a way to enable it via the UI or shell (which is also restricted).

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

Re: Cortex VM Broker SNMP monitoring

GSandbrand — Thu, 10 Apr 2025 07:02:38 GMT

Thnak you for your reply,

for you, it's not possible to monitoring this VM ? maybe SSH ?

Re: Cortex VM Broker SNMP monitoring

aspatil — Thu, 10 Apr 2025 11:38:06 GMT

For health monitoring:

Go to Settings → Configuration → Broker VMs.

You’ll see status indicators (green/yellow/red) for connectivity, services, and CPU usage.

This is the official and supported way to check Broker VM health.

Re: Cortex VM Broker SNMP monitoring

jmazzeo — Thu, 10 Apr 2025 16:56:54 GMT

You can configure Prometheus to monitor the Broker VM: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Monitor-Broker-VM-using-Prometheus