Cortex VM Broker SNMP monitoring

[GSandbrand]

Hello guys,

i would like to know if it's possible pour monitoring the VM broker with snmp protocol ?

i need to add this VM to my PRTG server, but i can't do it !

Best regards,

Grégory

[aspatil]

Hello @GSandbrand ,

The Broker VM is a hardened virtual appliance, purpose-built to act as a secure relay for data ingestion (e.g., Syslog, Traps, Directory Sync, etc.) in Cortex XDR.

Palo Alto Networks intentionally restricts access and services running on the VM to reduce the attack surface.

SNMP is not enabled on the Broker VM, nor is there a way to enable it via the UI or shell (which is also restricted).

If you feel this has answered your query, please let us know by clicking like and  on "mark this as a Solution". Thank you.

[GSandbrand]

Thnak you for your reply,

for you, it's not possible to monitoring this VM ? maybe SSH ?

[aspatil · Accepted solution]

For health monitoring:

Go to Settings → Configuration → Broker VMs.

You’ll see status indicators (green/yellow/red) for connectivity, services, and CPU usage.

This is the official and supported way to check Broker VM health.

[jmazzeo]

You can configure Prometheus to monitor the Broker VM: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Monitor-Broker-VM-usi...