Prisma SDWAN ION monitoring

[Filip_Elsen]

Hi,

We have deployed several branches, unfortunately monitoring the branch ION by snmp doesn't seem to work out. Response times of ION's on snmpwalk are high (up to 10sec). We were recommened to use api monitoring instead.

I've generated auth keys etc and can querry SCM (api.strata.paloaltonetworks.com......). 

Unfortunately I cannot find any relevant documentation on how to querry ION: cpu, memory, up/down, etc.

Does anyone has experience with this?

Thank you,

Filip

[ecraig]

Go here to find API documentation:

https://pan.dev/sdwan/api

Here are details on the system point metrics call:
https://pan.dev/sdwan/api/post-sdwan-v-2-0-api-monitor-sys-point-metrics/

You might find this prior post helpful:

https://live.paloaltonetworks.com/t5/prisma-sd-wan-discussions/inability-to-prisma-access-sd-wan-met...

[James.McCutcheon]

What firmware are you running? We've just updated out 1200-S's to 6.5.1 and have found SNMP performance and returns much, much better. Definitely agree it was pretty flaky in earlier versions.

[Filip_Elsen]

We're on 6.3.1-b6, because of the best behavior with redundanccy & fail-to-wire. We've verified the behavior of several versions, the differences are quite huge!

On this version, ION's fail to respond in a consistent way, making monitoring not reliable.

By TAC we were advised to change the TTL to 10sec, which is impossible on the monitoring platform.

We've been trying to achieve something via API calls, (pand.dev etc), but this isn't straight foward at all.