Page 1 of 1

Looking for Palo Alto Networks Firewall .cfg file example

Posted: Tue Apr 09, 2019 6:43 pm
by tgrossner
Does anyone have an example of a .cfg file for a Palo Alto Networks firewall being monitored by Nagios and (hopefully) using the check_paloalto script/plugin?

Thanks in advance.
-Tim

Re: Looking for Palo Alto Networks Firewall .cfg file exampl

Posted: Wed Apr 10, 2019 3:59 pm
by scottwilkerson
It isn't realy possible for someone to give you the .cfg file because it depends on how you setup the command and what your specific information is..

Have you tested the plugin from the CLI and made sure it works in your case and with your equipment?

Re: Looking for Palo Alto Networks Firewall .cfg file exampl

Posted: Wed Apr 10, 2019 4:01 pm
by ssax
We don't have any .cfg file examples (as we do not have any Palo Alto devices) but we can certainly try to help you getting them working if you're having issues.

Are you using this one?

A)

https://exchange.nagios.org/directory/P ... ll/details

Or this one?

B)

https://nagios-check-paloalto.readthedo ... umentation

Or a different one? Please post the link to the exact version you are using or attach the plugin.

Regardless of the plugin you need 4 things:

1. The plugin installed
- Make sure it's installed and you can run it via the nagios user:

Code: Select all

su - nagios
/path/to/your/plugin -H X.X.X.X
2. Define a command to that your service can use it.

3. Define the host.

4. Define the service to use the new command/plugin.

------

If you're using A):

Code: Select all

define command {
    command_name    check_paloalto
    command_line    $USER1$/check_paloalto $HOSTADDRESS$ $ARG1$ $ARG2$ $ARG3$ $ARG4$
}
Define the service (warning is set to 10, critical is set to 15, change them per your requirements):

Code: Select all

define service {
    host_name                YOURHOST
    service_description      Palo Alto Load
    check_command            check_paloalto!'SNMPCOMMUNITY'!load!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto Session Use
    check_command            check_paloalto!'SNMPCOMMUNITY'!sessionuse!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto State
    check_command            check_paloalto!'SNMPCOMMUNITY'!state!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}


define service {
    host_name                YOURHOST
    service_description      Palo Alto Uptime
    check_command            check_paloalto!'SNMPCOMMUNITY'!uptime!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}

define service {
    host_name                YOURHOST
    service_description      Palo Alto Fan
    check_command            check_paloalto!'SNMPCOMMUNITY'!fan!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}

define service {
    host_name                YOURHOST
    service_description      Palo Alto Temp
    check_command            check_paloalto!'SNMPCOMMUNITY'!temp!10!15
    max_check_attempts       5
    check_interval           5
    retry_interval           1
    check_period             24x7
    notification_interval    60
    notification_period      24x7
    contacts                 nagiosadmin
    register                 1
}
-----

If you're using B):

Let me know.