topic Re: How to know peak throughput using on palo? in General Topics

How to know peak throughput using on palo?

ThaiAirasia — Thu, 20 Jul 2017 05:07:15 GMT

Hi

From command "show system statistics session" , we can see real-time throughput value.

Is there a way to know or collect those value ?, we want to see the maximum/peak throughput been using on palo.

From what i think. (not sure if we can do these method?)
1. Is there a way to using API to collect throughput value , then we can plot them on excel?
2. Is tech support file collect all throughput value?
3. Is monitoring tool can collect throughput value from palo? and how?

Please share your method.
Thank you very much

Re: How to know peak throughput using on palo?

abjain — Thu, 20 Jul 2017 05:27:21 GMT

"> show session info " output contains current throughput, packet rate etc. You can fetch this via xml api and plot it. However this is not historic or average value and shows the value at that point.

You can also use netflow to send interface based statistics. : https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/reports-and-logging/monitor-the-firewall-using-netflow.html

CLI can be used as well to check live packet rate on each interface:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Check-Throughput-of-Interfaces/ta-p/58812

However this is not something you can fetch using a monitoring tool.

Re: How to know peak throughput using on palo?

teepan123 — Mon, 24 Jul 2017 12:43:44 GMT

Hi

I've some problem with my script. I'm currently using shell script which call api on PA-5020 and get the throughput value via command "show session info"

the problem is .. It's show throughput only on dp0 !!!!

How to make command to show all dataplane?

or we can just multiply value we get .. ie. get throughput from dp0 = 1000kbps then we can multiply it with 4 (four dataplane in total) so we get overall throughput on all dataplane = 4000kbps ........ Is this really ok?

Re: How to know peak throughput using on palo?

BPry — Mon, 24 Jul 2017 14:48:59 GMT

@ThaiAirasia,

Look into Pan(w)achrome extension from Chrome. This allows you to view some historical info but it doesn't really store it for you unless the extension is running.

If you just want to keep the info then script it up in the API and dump the output to a file repository so that you can view it later when you need to.

Re: How to know peak throughput using on palo?

teepan123 — Mon, 24 Jul 2017 16:16:41 GMT

This is my script

bin/bash
tp=$(curl -k -s 'https://1.1.1.1/api/?type=op&cmd=<show><session><info></info></session></show>&key=AAA' | grep kbps)

as i told , this command is not working due to it show only *.dp0. (so value we get is lesser than the real throughput -_-). Not sure if we can do another command api.

ps. i'm creater of this post . just don't know why account name is change like that.

Re: How to know peak throughput using on palo?

abjain — Fri, 28 Jul 2017 01:52:35 GMT

You can set the system setting target-dp to each one: (applicable to platforms with multiple DPs)

set system setting target-dp dp0

show session info

set system setting target-dp dp1

show session info

set system setting target-dp dp2

show session info

set system setting target-dp none

Extract values from each and then add.