General AIOps questions

[RobertShawver]

I have a fairly large environment and have just moved Panorama and Loggers to 10.1.X.  I'm mainly hoping to use AIOps for hardware failure notification, so let's say I have a pair of FW's in England still on 9.1.x connected to my Panorama.  If I have AIOps installed with only Panorama onboarded, is that enough to say get a notification if a fan goes out on a FW in England?  Hopefully that makes sense.

[TomYoung]

Hi @RobertShawver ,

In the AIOps dashboard, Panorama only shows health alerts for itself.  Health alerts are tied to each device.  So, the device needs to be onboarded to AIOps to see the alerts.  Try it!  You can activate AIOps for free and onboard Panorama.  Any device that is enabled for telemetry sharing is already onboarded.  https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/onboard-devices

Thanks,

Tom

[RobertShawver]

Hi Tom -

Setting this up felt like it got really complicated really quick, had to add apps to rules within the FW, whitelist things in Prisma and so on.  Still nothing in my dashboard and it feels like way more than two hours ago since I did all this.  My question is, how do I know if I did everything?  Is there a log or something I can check to see if it's just still thinking about adding stuff to the dashboard or if I'm actually missing something?

[TomYoung · Accepted solution]

Hi @RobertShawver ,

When you enable telemetry ( and the device certificate ) on Panorama or the NGFW, the device should show up in AIOps.  That's all I had to do, and all my devices show up.  Edit:  Maybe I did add devices as mentioned in the video.  I don't remember.

Sorry for your frustration.  I am not sure what is wrong.  Here are some videos that may help -> https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/new-activation-onboarding-and-upgrad....

Thanks,

Tom

[RobertShawver]

I think that got it!  I had to do the device association as shown in the video. Now, it still does say Telemetry Collection Disabled on the dashboard however. 

[MMadrala · Accepted solution]

You need to onboard each firewall through apps.paloaltonetworks.com but also make sure that telemetry is enabled on each device and correct region is in use. This can be done either via template on Panorama or individually on each firewall.