topic Inability to Prisma Access SD-WAN Metrics via API Endpoints in Prisma SD-WAN Discussions

Inability to Prisma Access SD-WAN Metrics via API Endpoints

K.Jrva — Fri, 18 Oct 2024 08:41:23 GMT

I am experiencing issues accessing Prisma SD-WAN metrics through the API on multiple versions.

While certain API endpoints, such as those related to site and device configurations, are functioning correctly, I am unable to retrieve data from metrics-related endpoints.

Here are the specifics:

Working API Example:
- Endpoint: GET /v4.10/api/sites/{site-id}
- Command: curl -L 'https://api.sase.paloaltonetworks.com/sdwan/v4.10/api/sites/xxx' -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json' -s| jq -r '._status_code'
- Command Output: 200
- A successful 200 OK status with details for a specific site (id: xxx), including its configuration and location, confirms that my token and other configuration aspects are correct.
Failing API Example 1:
- Endpoint: GET /v2.3/api/monitor/sys_metrics
- Command: curl -L 'https://api.sase.paloaltonetworks.com/sdwan/v2.3/api/monitor/sys_metrics' -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json' | jq
- Command Output: No Output
- Issue: No response or data returned
Failing API Example 2:
- Endpoint: GET /v2.1/api/monitor/aiops/aggregates
- Command: curl -L 'https://api.sase.paloaltonetworks.com/sdwan/v2.1/api/monitor/aiops/aggregates' -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json' | jq
- Command Output: { "_status_code": "404", "_info": [ { "code": "ROUTE_NOT_FOUND_0001", "message": "ROUTE_NOT_FOUND_0001: /v2.1/api/tenants/xxx/monitor/aiops/aggregates" } ] }

These errors suggest that either the routes for metrics APIs are unavailable or misconfigured.

I have checked the relevant documentation https://pan.dev/sdwan/api/metrics/ and confirmed my implementation matches the expected usage.

Please advise on any steps to resolve this or confirm whether these API endpoints are functional in the current release.

Re: Inability to Prisma Access SD-WAN Metrics via API Endpoints

K.Jrva — Fri, 01 Nov 2024 07:22:06 GMT

I've found that metrics-related API endpoints are functional using the POST method instead of GET.

Here’s an example that successfully retrieves metrics data:

url="https://api.sase.paloaltonetworks.com/sdwan/monitor/v2.0/api/monitor/sys_point_metrics" token="YOUR_BEARER_TOKEN" site_id="YOUR_SITE_ID" element_id="YOUR_ELEMENT_ID" current_time=$(date -u -d '-5 minutes' +"%Y-%m-%dT%H:%M:%S.000Z") curl -X POST "$url" \ -H "Authorization: Bearer $token" \ -H "Content-Type: application/json" \ -H "Accept: application/json" \ -H "x-panw-region: europe" \ -d '{ "start_time": "'"$current_time"'", "interval": "5min", "metrics": [ { "name": "MemoryUsage", "unit": "percentage" } ], "filter": { "site": "'"$site_id"'", "elements": [ "'"$element_id"'" ] }, "view": {} }'

This command sends a POST request with the necessary payload to retrieve the MemoryUsage metric for the specified site and element.

Re: Inability to Prisma Access SD-WAN Metrics via API Endpoints

VladFSousa — Thu, 27 Nov 2025 19:37:58 GMT

You could use a python script like this one too:
https://github.com/vladracs/prismasase/blob/main/scm_device_cpu_timeseries.py