Accessing Management Plane and Data Plane Uptime on a Palo Alto Networks Device

Overview

Uptime may differ between the management plane and data plane on a Palo Alto Networks device. This document explains various ways to get uptime for each management plane and data plane.

Management Plane

1. CLI command: show system resource | match up
   The following is a sample output of the command.
    
2. 
    
3. API: https://hostname/api/?type=op&cmd=<show><system><resources></resources></system></show>&key=APIKEY
   Note: Replace "hostname" and "APIKEY" with the appropriate values.

Data Plane

1. CLI command: show system info | match uptime
   The following is a sample output of the command.
   
   
    
2. API: https://hostname/api/?type=op&cmd=<show><system><info></info></system></show>&key=APIKEY
   Note: Replace "hostname" and "APIKEY" with the appropriate values.
    
3. From Firewall GUI: Value for uptime can be found on the Dashboard tab, in the General Information section.                                                                                                                                                                           
4. From Panorama GUI: Panorama can generate detailed device health reports for managed devices. This report includes the uptime for the Firewall at hand.

   
   In order to generate this report, open the Panorama web interface and navigate to Panorama > Managed Devices > Health.
   
   Click the device name in either the All Devices tab or the Deviating Devices tab, a detailed device health report must open in a separate window. The uptime appears at the bottom of the System Information section.                                                                                                                                                      

5. SNMP:  .1.3.6.1.2.1.25.1.1.0 (hrSystemUptime), MIB : SNMPv2-MIB
   
   

Note: There is another similar OID, sysUpTime (.1.3.6.1.2.1.1.3.0), which is the same as sysUpTimeInstance. The difference between sysUpTime (sysUpTimeInstance) and hrSystemUptime is that sysUpTime indicates the uptime since snmpd was initialized. On the other hand, hrSystemUptime indicates the uptime since the host system was initialized. Thus, if you run "debug software restart snmpd" sysUpTime resets to zero. The uptime in "show system info" remains the same as hrSystemUptime ,in that case.

owner: ymiyashita, dperezvertti