Page 1 of 1
Looking for Palo Alto Networks Firewall .cfg file example
Posted: Tue Apr 09, 2019 6:43 pm
by tgrossner
Does anyone have an example of a .cfg file for a Palo Alto Networks firewall being monitored by Nagios and (hopefully) using the check_paloalto script/plugin?
Thanks in advance.
-Tim
Re: Looking for Palo Alto Networks Firewall .cfg file exampl
Posted: Wed Apr 10, 2019 3:59 pm
by scottwilkerson
It isn't realy possible for someone to give you the .cfg file because it depends on how you setup the command and what your specific information is..
Have you tested the plugin from the CLI and made sure it works in your case and with your equipment?
Re: Looking for Palo Alto Networks Firewall .cfg file exampl
Posted: Wed Apr 10, 2019 4:01 pm
by ssax
We don't have any .cfg file examples (as we do not have any Palo Alto devices) but we can certainly try to help you getting them working if you're having issues.
Are you using this one?
A)
https://exchange.nagios.org/directory/P ... ll/details
Or this one?
B)
https://nagios-check-paloalto.readthedo ... umentation
Or a different one? Please post the link to the exact version you are using or attach the plugin.
Regardless of the plugin you need
4 things:
1. The plugin installed
- Make sure it's installed and you can run it via the nagios user:
Code: Select all
su - nagios
/path/to/your/plugin -H X.X.X.X
2. Define a command to that your service can use it.
3. Define the host.
4. Define the service to use the new command/plugin.
------
If you're using A):
Code: Select all
define command {
command_name check_paloalto
command_line $USER1$/check_paloalto $HOSTADDRESS$ $ARG1$ $ARG2$ $ARG3$ $ARG4$
}
Define the service (warning is set to 10, critical is set to 15, change them per your requirements):
Code: Select all
define service {
host_name YOURHOST
service_description Palo Alto Load
check_command check_paloalto!'SNMPCOMMUNITY'!load!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
define service {
host_name YOURHOST
service_description Palo Alto Session Use
check_command check_paloalto!'SNMPCOMMUNITY'!sessionuse!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
define service {
host_name YOURHOST
service_description Palo Alto State
check_command check_paloalto!'SNMPCOMMUNITY'!state!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
define service {
host_name YOURHOST
service_description Palo Alto Uptime
check_command check_paloalto!'SNMPCOMMUNITY'!uptime!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
define service {
host_name YOURHOST
service_description Palo Alto Fan
check_command check_paloalto!'SNMPCOMMUNITY'!fan!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
define service {
host_name YOURHOST
service_description Palo Alto Temp
check_command check_paloalto!'SNMPCOMMUNITY'!temp!10!15
max_check_attempts 5
check_interval 5
retry_interval 1
check_period 24x7
notification_interval 60
notification_period 24x7
contacts nagiosadmin
register 1
}
-----
If you're using B):
Let me know.