Palo vm-series cloudwatch plugin no metrics

[MGT_LIBEJ]

Hi all,

I’m trying to get my Palo Alto VM-Series firewall metrics to appear in CloudWatch, but nothing is showing up. I’ve verified the following:

• IAM policy is correctly configured

              Trust Policy

              Permission policy:

• VM-Series version: 10.2.13-h7

• CloudWatch namespace and interval settings are correct

• Amazon services are reachable 

The VM logs are showing this:

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloud service hash: {'enabled': 'yes', 'name': 'VMSeries-Palo'}

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch timeout not in configuration.Defaulting to 5

2026-01-28 19:43:27.299 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:48:30.292 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:53:32.189 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 19:58:34.203 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 20:03:36.093 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

2026-01-28 20:08:38.108 +0100 DEBUG: [vm_agent] aws-cloudwatch: Cloudwatch interval: 5

Has anyone run into this before or knows what else I can check to get the metrics flowing?

Thanks in advance!