How do I participate in the Telemetry Agent program?
You can register at: https://telemetry.paloaltonetworks.com/telemetry-agent.
Complete the form and get access to the following:
Please download the Telemetry Agent QuickStart Guide, which will walk you through the entire process.
Where do I go if I need help or want to provide feedback regarding the Telemetry Agent?
Please open a case with Customer Support if you need help with the Telemetry Agent. To provide general feedback, send email to telemetry@paloaltonetworks.com.
What are the minimum system requirements for the Telemetry Agent?
Software
OS (Operating Systems) supported
Compute resources
Network Connectivity
Supports
My system has a previous installation of docker and docker-compose which does not appear to be compatible with the instructions in the QuickStart Guide. What should I do?
The instructions provided in the QuickStart Guide assume a new VM or physical machine installation. The Telemetry Agent system requirements do not take into account any additional software running on the machine.
I have SSL decryption between my Telemetry Agent machine and the Internet. When I attempt to run the command: "curl -fsSL https://get.docker.com -o get-docker.sh" as outlined in the Docker Linux 'convenience script' guide I get an SSL error and it doesn't work. What should I do?
Curl has a command line option which allows for ignorning SSL errors "-k". Just add "-k" to the curl command options list and it should work. e.g. "curl -kfsSL https://get.docker.com -o get-docker.sh"
While running the Docker installation command for the Telemetry Agent, I get an error stating that a process can't start because the requested port has a conflict (already in use, reserved or not authorized). What should I do?
The instructions provided in the QuickStart Guide assume a new VM or physical machine installation. The Telemetry Agent system requirements do not take into account any additional software running on the machine. You will need to stop or remove the software causing the conflict. You may also modify the docker-compose.yml file to change port usage (this is covered in another Q/A).
When I register for the Beta program at the telemetry portal, I only get one "Secure Token". What if I need or want to use more than one agent?
The "Secure Token" is tied to your identity and each user who registers is allowed one token. You may use that same token on as many Telemetry Agents as you like.
What data does the Telemetry Agent collect?
All of these categories are configurable globally (opt-in/opt-out) in the agent UI under Configuration->Telemetry.
What if I want the Telemetry Agent interface to run on a port other than 443? What can I do?
The docker-compose.yaml file which came in the "Installation Bundle" can be modified to accommodate this. Open the docker-compose.yaml file in a plain text editor and modify the following section. In this example we have changed port 80 to 8080 and port 443 to 4443:
proxy:
container_name: telemetry_agent_proxy
image: quay.io/cexp/telemetry_agent_proxy:v1
restart: always
ports:
- '8080:80'
- '4443:443'
volumes:
- 'telemetry_agent_static:/static:ro'
- www:/var/www:ro
- proxy_certs:/certs
depends_on:
- app
Once you have made the changes, save the file refresh the agent with the following command:
docker-compose -p agent up -d
That's it! You should now be able to reach the Telemetry Agent UI on port 4443 or port 8080 (which will be redirected to port 4443). e.g. https://192.168.0.100:4443
Where can I view the data collected by the Telemetry Agent Beta?
The Telemetry Agent is a data acquisition mechanism, and not meant to surface data or insights derived from that data. Device Insights, available soon in the Cortex Hub will be the location for visualizing telemetry data.
Participation in the Telemetry Agent beta program prior to the availability of Device Insights will establish a foundation of data upon which insights can be delivered at first login to Device Insights. In addition to building this data foundation, we have included Technical Support File (TSF) collection in the agent. This feature will help to provide the data necessary for Palo Alto Networks Support and Services to better serve you in the event you need help.
Does the Telemetry Agent support IPv6?
The Telemetry Agent does not currently support IPv6, however, it is a feature we will be adding in the near future.
Does the Telemetry Agent support outbound an proxy configuration?
The Telemetry Agent does not currently support outbound proxy, however, it is a feature we will be adding in the near future.