Receiving too many alerts when a ISP or Tunnel link goes up or down.

Rehaman — Sat, 19 Oct 2024 16:23:33 GMT

Hello.

I have a Palo Alto PA-440

We have enabled path monitoring for our ISPs, with the destination address/monitor IP set to 8.8.8.8. The ping interval is set to 3 seconds, and the ping count is 5.

Additionally, we have configured and enabled system email alerts for the severity level "Critical". As soon as any of the ISPs is down or the route is restored, we receive an email alert.

We do receive email notifications when an ISP goes down or comes back up. However, we are experiencing an issue with receiving too many email alerts for "Path Monitoring Failed."

Issue Scenario:

If one ISP is down (out of three) for, say, 2 hours, we receive approximately 8-10 "Path Monitoring Failed" email alerts for that ISP.

I am attaching configuration screenshot of "System logs settings" with this

Ideally, we should receive an email alert when the ISP goes down and another when it comes back up. There should not be multiple aggregate emails for these events. We need assistance in resolving this issue

Can you please suggest a solution for this issue?

Re: Receiving too many alerts when a ISP or Tunnel link goes up or down.

SutareMayur — Sun, 20 Oct 2024 05:20:33 GMT

Hi @Rehaman

I think, best way to monitor this is using below events. This will give you desired alerts when ISP goes down/up.

I have tested this myself and I received one alert each when ISP when down and up.

Hope it helps!

topic Receiving too many alerts when a ISP or Tunnel link goes up or down. in General Topics

Receiving too many alerts when a ISP or Tunnel link goes up or down.

Re: Receiving too many alerts when a ISP or Tunnel link goes up or down.