Looking for Palo Alto Networks Firewall .cfg file example

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
tgrossner
Posts: 1
Joined: Tue Apr 09, 2019 5:30 pm

Looking for Palo Alto Networks Firewall .cfg file example

Post by tgrossner »

Does anyone have an example of a .cfg file for a Palo Alto Networks firewall being monitored by Nagios and (hopefully) using the check_paloalto script/plugin?

Thanks in advance.
-Tim
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Looking for Palo Alto Networks Firewall .cfg file exampl

Post by scottwilkerson »

It isn't realy possible for someone to give you the .cfg file because it depends on how you setup the command and what your specific information is..

Have you tested the plugin from the CLI and made sure it works in your case and with your equipment?
Former Nagios employee
Creator:
ahumandesign.com
enneagrams.com
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: Looking for Palo Alto Networks Firewall .cfg file exampl

Post by ssax »

We don't have any .cfg file examples (as we do not have any Palo Alto devices) but we can certainly try to help you getting them working if you're having issues.

Are you using this one?

A)

https://exchange.nagios.org/directory/P ... ll/details

Or this one?

B)

https://nagios-check-paloalto.readthedo ... umentation

Or a different one? Please post the link to the exact version you are using or attach the plugin.

Regardless of the plugin you need 4 things:

1. The plugin installed
- Make sure it's installed and you can run it via the nagios user:

Code: Select all

su - nagios
/path/to/your/plugin -H X.X.X.X
2. Define a command to that your service can use it.

3. Define the host.

4. Define the service to use the new command/plugin.

------

If you're using A):

Code: Select all

define command {
    command_name    check_paloalto
    command_line    $USER1$/check_paloalto $HOSTADDRESS$ $ARG1$ $ARG2$ $ARG3$ $ARG4$
}
Define the service (warning is set to 10, critical is set to 15, change them per your requirements):

Code: Select all

define service {
    host_name                YOURHOST
    service_description      Palo Alto Load
    check_command            check_paloalto!'SNMPCOMMUNITY'!load!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto Session Use
    check_command            check_paloalto!'SNMPCOMMUNITY'!sessionuse!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto State
    check_command            check_paloalto!'SNMPCOMMUNITY'!state!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto Uptime
    check_command            check_paloalto!'SNMPCOMMUNITY'!uptime!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}

define service {
    host_name                YOURHOST
    service_description      Palo Alto Fan
    check_command            check_paloalto!'SNMPCOMMUNITY'!fan!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}

define service {
    host_name                YOURHOST
    service_description      Palo Alto Temp
    check_command            check_paloalto!'SNMPCOMMUNITY'!temp!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}
-----

If you're using B):

Let me know.
Locked