Panorama high MIB memory

[Carracido]

Hello community!

We are monitoring the Panorama system resources and we get alerts regarding memory (MIB). We don´t have any performance issues though.

Can you advice if the following memory levels are fine or it´s too little memory free?

> show system resources

top - 15:54:07 up 144 days, 33 min,  1 user,  load average: 0.68, 0.76, 0.87
Tasks: 352 total,   1 running, 349 sleeping,   0 stopped,   2 zombie
%Cpu(s):  0.4 us,  0.8 sy,  0.0 ni, 98.5 id,  0.0 wa,  0.0 hi,  0.4 si,  0.0 st
MiB Mem :  64402.4 total,    438.4 free,  60271.7 used,   3692.3 buff/cache
MiB Swap:   2047.9 total,      0.0 free,   2047.9 used.   3624.3 avail Mem 

Thank you!

[BPry]

@Carracido,

The way that you mention the issue makes it sound like you have an outside monitoring solution sending alerts, not Panorama itself correct? I would not worry about resources unless panorama is sending alerts itself, and from what you've posted it shouldn't be. Using default values on an outside monitoring solution pretty much always needs to be adjusted for PAN.

[Carracido]

@BPry, thank you for your reply.

Will the Panorama send alerts when availalbe memory is under certain level? Is there a threshold configurable? 

Also, do you know why the value of available memory is much higher than free memory? How both parameters relate to each other?

Thank you in advance!  

[BPry]

@Carracido,

Yes Panorama will alarm, and no I don't believe that the alarm threshold is something you can modify. 

PAN-OS will gobble up and claim most of the system memory and allocate it out as needed. You would never expect to see much free memory on any of the platforms simply because that isn't how PAN-OS functions; it's the available memory that you should really be monitoring if anything. 

[Carracido]

@BPry 

Thanks a lot for the info.

It looks however a bit misleading that available memory (avail Mem) is in the same row as MiB swap when in fact is referring to the system memory.

Do you maybe know what would be a fair value to enter in the monitoring system to avoid alerts?

kind Regards