I have an Observium question - I am looking to create an alert for Palo Alto Networks firewall's session count, ideally one that fires when the session percentage goes above 85%.
How would I build such a checker? I have tested a couple of different ways, and not been able to get one to fire.
The MIB contains references such as:
panSessionUtilization OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Session table utilization percentage. Values should
be between 0 and 100."
::= { panSession 1 }
...can I build an alert based on panSessionUtilization?
Hi Tim,
At present the way to do this would be to create a custom oid collecting this value, and then alert on that.
Alerting from data we collect as part of the "graphs" stuff is not yet possible (it's super fiddly, mostly because of counters). It's planned for the future, but not implemented yet.
Thanks, adam. On 2019-04-11 03:39:42, Tim Grossner via observium observium@observium.org wrote: I have an Observium question - I am looking to create an alert for Palo Alto Networks firewall's session count, ideally one that fires when the session percentage goes above 85%.
How would I build such a checker? I have tested a couple of different ways, and not been able to get one to fire.
The MIB contains references such as: panSessionUtilization OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Session table utilization percentage. Values should be between 0 and 100." ::= { panSession 1 }
...can I build an alert based on panSessionUtilization?
--
[GuidePoint Security] [http://www.guidepointsecurity.com] Tim Grossner, Engineer II GuidePoint Security LLC | Your Mission. Secured. w (877) 889-0132 x7605 m (636) 542-8464 e tim.grossner@guidepointsecurity.com [mailto:tim.grossner@guidepointsecurity.com] Follow us! LinkedIn [http://www.linkedin.com/company/guidepoint-security] | Twitter [https://twitter.com/GuidePointSec] | Facebook [https://www.facebook.com/GuidePointSec] | Google+ [https://plus.google.com/+Guidepointsecurity/posts] | YouTube [https://www.youtube.com/channel/UCkajuS7JqEN3UGy6SXVhnfg]
GuidePoint Security recognized as recipient of 2018 Splunk Partner+ Awards! Read more [https://www.guidepointsecurity.com/2018/03/05/guidepoint-security-recognized...]
Confidentiality Notice: This communication constitutes an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. Section 2510, and its disclosure is strictly limited to the recipient intended by the sender of this message. This transmission, and any attachments, may contain confidential information and work product(s). If you are not the intended recipient, any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Please contact us immediately by return e-mail or call (877) 889-0132 [tel:(877)%2520889-0132] option 5, and destroy the original transmission and its attachments without reading or saving in any manner.
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (2)
-
Adam Armstrong -
Tim Grossner