Palo Alto
Plugin: go.d.plugin Module: snmp
Overview
Monitor Palo Alto (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 1 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.
Netdata's SNMP collector matches the device to the palo-alto.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.
This integration is supported on all platforms.
This integration supports multiple instances configured side-by-side.
Default Behavior
Auto-Detection
Auto-detected as Palo Alto via sysObjectID/sysDescr.
Limits
The default configuration for this integration does not impose any limits.
Performance Impact
The default configuration for this integration is not expected to impose a significant performance impact on the system.
Setup
You can configure the snmp collector in two ways:
| Method | Best for | How to |
|---|---|---|
| UI | Fast setup without editing files | Go to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job. |
| File | If you prefer configuring via file, or need to automate deployments (e.g., with Ansible) | Edit go.d/snmp.conf and add a job. |
important
UI configuration requires paid Netdata Cloud plan.
Prerequisites
SNMP access
SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site's SNMP hub.
Configuration
Options
Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.
via UI
Configure the snmp collector from the Netdata web interface:
- Go to Nodes.
- Select the node where you want the snmp data-collection job to run and click the ⚙ (Configure this node). That node will run the data collection.
- The Collectors → Jobs view opens by default.
- In the Search box, type snmp (or scroll the list) to locate the snmp collector.
- Click the + next to the snmp collector to add a new job.
- Fill in the job fields, then click Test to verify the configuration and Submit to save.
- Test runs the job with the provided settings and shows whether data can be collected.
- If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.
via File
The configuration file name for this integration is go.d/snmp.conf.
The file format is YAML. Generally, the structure is:
update_every: 1
autodetection_retry: 0
jobs:
- name: some_name1
- name: some_name2
You can edit the configuration file using the edit-config script from the
Netdata config directory.
cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf
Examples
There are no configuration examples.
Alerts
There are no alerts configured by default for this integration.
Metrics
On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Palo Alto profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.
109 metrics in 12 groups; each row is a chart context usable in alerts.
| Group | Metrics |
|---|---|
| Hardware / FRU | 3 |
| Network / IP | 28 |
| Network / Interface | 31 |
| Network / Routing | 10 |
| Network / TCP | 12 |
| Network / UDP | 6 |
| Network / VPN | 3 |
| System / Activity | 10 |
| System / CPU | 1 |
| System / Power | 2 |
| System / Uptime | 1 |
| Uncategorized | 2 |
Hardware / FRU
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_panEntryFRUModuleNumPorts | {port} | per FRUmodule_index, ent_descr | Number of ports on the FRU Module |
snmp.device_prof_panEntryFRUModulePowerUsed | W | per FRUmodule_index, ent_descr | Power used by the FRU Module in watts |
snmp.device_prof_panEntryFanTrayPowerUsed | W | per fan_tray_index, ent_descr | Power used by the Fan Tray in watts |
Network / IP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ipSystemStatsHCInBcastPkts | {packet}/s | per ipversion | The number of IP broadcast datagrams received |
snmp.device_prof_ipSystemStatsHCInForwDatagrams | {forward}/s | per ipversion | Input datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo… |
snmp.device_prof_ipSystemStatsHCInMcastOctets | bit/s | per ipversion | The total number of octets received in IP multicast datagrams |
snmp.device_prof_ipSystemStatsHCInMcastPkts | {packet}/s | per ipversion | The number of IP multicast datagrams received |
snmp.device_prof_ipSystemStatsHCInOctets | bit/s | per ipversion | Octets received in input IP datagrams |
snmp.device_prof_ipSystemStatsHCInReceives | {packet}/s | per ipversion | Input IP datagrams received |
snmp.device_prof_ipSystemStatsHCOutBcastPkts | {packet}/s | per ipversion | The number of IP broadcast datagrams transmitted |
snmp.device_prof_ipSystemStatsHCOutForwDatagrams | {packet}/s | per ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
snmp.device_prof_ipSystemStatsHCOutMcastOctets | bit/s | per ipversion | The total number of octets transmitted in IP multicast datagrams |
snmp.device_prof_ipSystemStatsHCOutMcastPkts | {packet}/s | per ipversion | The number of IP multicast datagrams transmitted |
snmp.device_prof_ipSystemStatsHCOutOctets | bit/s | per ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
snmp.device_prof_ipSystemStatsHCOutRequests | {packet}/s | per ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
snmp.device_prof_ipSystemStatsHCOutTransmits | {packet}/s | per ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
snmp.device_prof_ipSystemStatsInAddrErrors | {error}/s | per ipversion | Input IP datagrams discarded due to invalid IP address in header |
snmp.device_prof_ipSystemStatsInDiscards | {error}/s | per ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
snmp.device_prof_ipSystemStatsInHdrErrors | {error}/s | per ipversion | Discarded input IP datagrams due to errors in their IP headers |
snmp.device_prof_ipSystemStatsInNoRoutes | {errors}/s | per ipversion | Input IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipSystemStatsInTruncatedPkts | {error}/s | per ipversion | Input IP datagrams discarded due to datagram frame not carrying enough data |
snmp.device_prof_ipSystemStatsInUnknownProtos | {error}/s | per ipversion | Locally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol |
snmp.device_prof_ipSystemStatsOutDiscards | {error}/s | per ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
snmp.device_prof_ipSystemStatsOutFragCreates | {fragment}/s | per ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
snmp.device_prof_ipSystemStatsOutFragFails | {error}/s | per ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
snmp.device_prof_ipSystemStatsOutFragOKs | {packet}/s | per ipversion | The number of IP datagrams that have been successfully fragmented |
snmp.device_prof_ipSystemStatsOutFragReqds | {packet}/s | per ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
snmp.device_prof_ipSystemStatsOutNoRoutes | {error}/s | per ipversion | The number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipSystemStatsReasmFails | {error}/s | per ipversion | The number of failures detected by the IP re-assembly algorithm |
snmp.device_prof_ipSystemStatsReasmOKs | {packet}/s | per ipversion | The number of IP datagrams successfully reassembled |
snmp.device_prof_ipSystemStatsReasmReqds | {fragment}/s | per ipversion | The number of IP fragments received that needed to be reassembled at this interface |
Network / Interface
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ifAdminStatus | {status} | per interface, interface | Current administrative state of the interface |
snmp.device_prof_ifHighSpeed | bit/s | per interface, interface | Estimate of the interface's current bandwidth |
snmp.device_prof_ifNumber | {interface} | device | Number of network interfaces regardless of their current state present on this system |
snmp.device_prof_ifOperStatus | {status} | per interface, interface | Current operational state of the interface |
snmp.device_prof_ipIfStatsHCInBcastPkts | {packet}/s | per interface_index, ipversion | The number of IP broadcast datagrams received |
snmp.device_prof_ipIfStatsHCInDelivers | {packet}/s | per interface_index, ipversion | The total number of datagrams successfully delivered to IP user-protocols including ICMP |
snmp.device_prof_ipIfStatsHCInForwDatagrams | {forward}/s | per interface_index, ipversion | The number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find… |
snmp.device_prof_ipIfStatsHCInMcastOctets | bit/s | per interface_index, ipversion | The total number of octets received in IP multicast datagrams |
snmp.device_prof_ipIfStatsHCInMcastPkts | {packet}/s | per interface_index, ipversion | The number of IP multicast datagrams received |
snmp.device_prof_ipIfStatsHCInOctets | bit/s | per interface_index, ipversion | The total number of octets received in input IP datagrams, including those received in error |
snmp.device_prof_ipIfStatsHCOutBcastPkts | {packet}/s | per interface_index, ipversion | The number of IP broadcast datagrams transmitted |
snmp.device_prof_ipIfStatsHCOutForwDatagrams | {packet}/s | per interface_index, ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
snmp.device_prof_ipIfStatsHCOutMcastOctets | bit/s | per interface_index, ipversion | The total number of octets transmitted in IP multicast datagrams |
snmp.device_prof_ipIfStatsHCOutMcastPkts | {packet}/s | per interface_index, ipversion | The number of IP multicast datagrams transmitted |
snmp.device_prof_ipIfStatsHCOutOctets | bit/s | per interface_index, ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
snmp.device_prof_ipIfStatsHCOutRequests | {packet}/s | per interface_index, ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
snmp.device_prof_ipIfStatsHCOutTransmits | {packet}/s | per interface_index, ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
snmp.device_prof_ipIfStatsInAddrErrors | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because the IP address in their IP header's destination field was not a valid address t… |
snmp.device_prof_ipIfStatsInDiscards | {error}/s | per interface_index, ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
snmp.device_prof_ipIfStatsInHdrErrors | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded due to errors in their IP headers |
snmp.device_prof_ipIfStatsInNoRoutes | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipIfStatsInTruncatedPkts | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because the datagram frame didn't carry enough data |
snmp.device_prof_ipIfStatsInUnknownProtos | {error}/s | per interface_index, ipversion | The number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol |
snmp.device_prof_ipIfStatsOutDiscards | {error}/s | per interface_index, ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
snmp.device_prof_ipIfStatsOutFragCreates | {fragment}/s | per interface_index, ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
snmp.device_prof_ipIfStatsOutFragFails | {packet}/s | per interface_index, ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
snmp.device_prof_ipIfStatsOutFragOKs | {packet}/s | per interface_index, ipversion | The number of IP datagrams that have been successfully fragmented |
snmp.device_prof_ipIfStatsOutFragReqds | {packet}/s | per interface_index, ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
snmp.device_prof_ipIfStatsReasmFails | {error}/s | per interface_index, ipversion | The number of failures detected by the IP re-assembly algorithm |
snmp.device_prof_ipIfStatsReasmOKs | {packet}/s | per interface_index, ipversion | The number of IP datagrams successfully reassembled |
snmp.device_prof_ipIfStatsReasmReqds | {fragment}/s | per interface_index, ipversion | The number of IP fragments received that needed to be reassembled at this interface |
Network / Routing
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ospfIfLsaCount | {advertisement}/s | per ospf_ip_addr, neighbor_id | The total number of link-local link state advertisements in this interface's link-local link state database |
snmp.device_prof_ospfIfState | {status} | per ospf_ip_addr, neighbor_id | The OSPF Interface State |
snmp.device_prof_ospfNbrEvents | {event}/s | per neighbor_id, neighbor_ip | The number of times this neighbor relationship has changed state or an error has occurred |
snmp.device_prof_ospfNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfNbrState | {status} | per neighbor_id, neighbor_ip | The state of the relationship with this neighbor |
snmp.device_prof_ospfVirtIfLsaCount | {advertisement}/s | per neighbor_id | The total number of link-local link state advertisements in this virtual interface's link-local link state database |
snmp.device_prof_ospfVirtIfState | {status} | per neighbor_id | OSPF virtual interface states |
snmp.device_prof_ospfVirtNbrEvents | {change}/s | per neighbor_id, neighbor_ip | The number of times this virtual link has changed its state or an error has occurred |
snmp.device_prof_ospfVirtNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfVirtNbrState | {status} | per neighbor_id, neighbor_ip | The state of the virtual neighbor relationship |
Network / TCP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_tcpActiveOpens | {transition}/s | device | TCP connections transitioning from CLOSED to SYN-SENT |
snmp.device_prof_tcpAttemptFails | {failure}/s | device | Failed TCP connection attempts |
snmp.device_prof_tcpCurrEstab | {connection} | device | Current TCP connections in ESTABLISHED or CLOSE-WAIT state |
snmp.device_prof_tcpEstabResets | {reset}/s | device | TCP connections reset from ESTABLISHED/CLOSE-WAIT |
snmp.device_prof_tcpHCInSegs | {packet}/s | device | TCP segments received |
snmp.device_prof_tcpHCOutSegs | {packet}/s | device | TCP segments sent |
snmp.device_prof_tcpInErrs | {error}/s | device | TCP segments received with errors |
snmp.device_prof_tcpInSegs | {packet}/s | device | TCP segments received |
snmp.device_prof_tcpOutRsts | {reset}/s | device | TCP segments sent with RST flag |
snmp.device_prof_tcpOutSegs | {packet}/s | device | TCP segments sent |
snmp.device_prof_tcpPassiveOpens | {transition}/s | device | TCP connections transitioning from LISTEN to SYN-RCVD |
snmp.device_prof_tcpRetransSegs | {retransmit}/s | device | TCP segments retransmitted |
Network / UDP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_udpHCInDatagrams | {packet}/s | device | UDP datagrams received |
snmp.device_prof_udpHCOutDatagrams | {packet}/s | device | UDP datagrams sent |
snmp.device_prof_udpInDatagrams | {packet}/s | device | UDP datagrams received |
snmp.device_prof_udpInErrors | {error}/s | device | UDP datagrams received but couldn't be delivered (not due to missing app) |
snmp.device_prof_udpNoPorts | {error}/s | device | UDP datagrams received with no app on the destination port |
snmp.device_prof_udpOutDatagrams | {packet}/s | device | UDP datagrams sent |
Network / VPN
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_panGPGWUtilizationActiveTunnels | {tunnel} | device | Number of active tunnels |
snmp.device_prof_panGPGWUtilizationMaxTunnels | {tunnel} | device | Max tunnels allowed |
snmp.device_prof_panGPGWUtilizationPct | % | device | GlobalProtect Gateway utilization percentage |
System / Activity
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_hrSystemNumUsers | {session} | device | The number of user sessions for which this host is storing state information. A session is a collection of processes requiring a s… |
snmp.device_prof_hrSystemProcesses | {process} | device | The number of process contexts currently loaded or running on this system. |
snmp.device_prof_panSessionActive | {session} | device | Total number of active sessions |
snmp.device_prof_panSessionActiveICMP | {session} | device | Total number of active ICMP sessions |
snmp.device_prof_panSessionActiveSslProxy | {session} | device | Total number of active SSL proxy sessions |
snmp.device_prof_panSessionActiveTcp | {session} | device | Total number of active TCP sessions |
snmp.device_prof_panSessionActiveUdp | {session} | device | Total number of active UDP sessions |
snmp.device_prof_panSessionMax | {session} | device | Total number of sessions supported |
snmp.device_prof_panSessionSslProxyUtilization | % | device | SSL proxy session utilization percentage |
snmp.device_prof_panSessionUtilization | % | device | Session table utilization percentage |
System / CPU
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_cpu_usage | % | per cpu_index | The current CPU utilization |
System / Power
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_panEntityTotalPowerAvail | W | device | Total power available on the system in watts |
snmp.device_prof_panEntityTotalPowerUsed | W | device | Total power used on the system in watts |
System / Uptime
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_systemUptime | s | device | Time since the system was last rebooted or powered on. |
Uncategorized
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_hrStorageSize | By | per storage_index, rm:storage_type, rm:storage_alloc_unit | |
snmp.device_prof_hrStorageUsed | By | per storage_index, rm:storage_type, rm:storage_alloc_unit |
Troubleshooting
Other Problems
Collect Diagnostics for Netdata Support
For SNMP metrics, BGP, licensing, or topology issues, follow Collect SNMP troubleshooting data to include built-in diagnostics in a support bundle. SNMP evidence is unsanitized; share the bundle through a restricted Netdata Support ticket.
Do you have any feedback for this page? If so, you can open a new issue on our netdata/learn repository.