topic Re: getting more global counters through SNMP in General Topics

getting more global counters through SNMP

frigault — Tue, 03 Sep 2024 21:39:27 GMT

there are a bunch of counters available through SNMP, for example the amount of active sessions at a specific moment

PAN-COMMON-MIB::panSessionActive.0 = INTEGER: 2

I am looking for the overall amount of sessions created on the firewall, with the intent to graph that in Grafana. This is reflected in the global counters:

> show counter global name session_allocated Name: session_allocated Value: 629 Severity: Informational Category: session Aspect: resource Description: Sessions allocated

this counter looks exactly like what I was hoping for.

Is there a way to expose this counter, or (in general) more global counters, through SNMP?

Re: getting more global counters through SNMP

kiwi — Wed, 04 Sep 2024 12:53:43 GMT

Hi @frigault ,

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS

In the above KB article please find the following OID for the number of sessions allocated.

> Total Active Sessions panSessionActive.0 1.3.6.1.4.1.25461.2.1.2.3.3.0 PAN-COMMON-MIB

Active TCP Sessions panSessionActiveTcp.0 1.3.6.1.4.1.25461.2.1.2.3.4.0 PAN-COMMON-MIB

Active UDP Sessions panSessionActiveUdp.0 1.3.6.1.4.1.25461.2.1.2.3.5.0 PAN-COMMON-MIB

Active ICMP Sessions panSessionActiveICMP.0 1.3.6.1.4.1.25461.2.1.2.3.6.0 PAN-COMMON-MIB

% session utilization panSessionUtilization.0 1.3.6.1.4.1.25461.2.1.2.3.1.0 PAN-COMMON-MIB

Max Sessions for the device panSessionMax.0 1.3.6.1.4.1.25461.2.1.2.3.2.0 PAN-COMMON-MIB

Please also check the following link which might proof useful: https://live.paloaltonetworks.com/t5/integration-discussions/how-to-monitor-pa-firewall-packets-rate-via-snmp/td-p/435083

Kind regards,

-Kim.

Re: getting more global counters through SNMP

frigault — Wed, 04 Sep 2024 12:56:42 GMT

The session allocated global counter counts the total number of sessions created on the firewall since boot. This is not reflected in any SNMP metrics.