getting more global counters through SNMP

[frigault]

there are a bunch of counters available through SNMP, for example the amount of active sessions at a specific moment

PAN-COMMON-MIB::panSessionActive.0 = INTEGER: 2

I am looking for the overall amount of sessions created on the firewall, with the intent to graph that in Grafana. This is reflected in the global counters:

> show counter global name session_allocated
Name:           session_allocated
Value:          629
Severity:       Informational
Category:       session
Aspect:         resource
Description:    Sessions allocated

this counter looks exactly like what I was hoping for.

Is there a way to expose this counter, or (in general) more global counters, through SNMP?

[kiwi]

Hi @frigault ,

 https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS

In the above KB article please find the following OID for the number of sessions allocated.

> Total Active Sessions panSessionActive.0 1.3.6.1.4.1.25461.2.1.2.3.3.0 PAN-COMMON-MIB

Active TCP Sessions panSessionActiveTcp.0 1.3.6.1.4.1.25461.2.1.2.3.4.0 PAN-COMMON-MIB

Active UDP Sessions panSessionActiveUdp.0 1.3.6.1.4.1.25461.2.1.2.3.5.0 PAN-COMMON-MIB

Active ICMP Sessions panSessionActiveICMP.0 1.3.6.1.4.1.25461.2.1.2.3.6.0 PAN-COMMON-MIB

% session utilization panSessionUtilization.0 1.3.6.1.4.1.25461.2.1.2.3.1.0 PAN-COMMON-MIB

Max Sessions for the device panSessionMax.0 1.3.6.1.4.1.25461.2.1.2.3.2.0 PAN-COMMON-MIB

Please also check the following link which might proof useful: https://live.paloaltonetworks.com/t5/integration-discussions/how-to-monitor-pa-firewall-packets-rate...

Kind regards,

-Kim.

[frigault]

The session allocated global counter counts the total number of sessions created on the firewall since boot. This is not reflected in any SNMP metrics.