Correlate Incidents with SNMP Traps
Focus
Focus
Prisma SD-WAN

Correlate Incidents with SNMP Traps

Table of Contents

Correlate Incidents with SNMP Traps

Lets learn on the Correlation Incidents with SNMP Traps in Prisma SD-WAN. Incidents correlate with custom and generic SNMP traps.
Where Can I Use This?What Do I Need?
  • Prisma SD-WAN
  • Prisma SD-WAN license
The event engine performs multiple functions such as incident correlation, suppression, and escalation depending on the network conditions and the administrator configured event policy rules. This improves the operational efficiency of the app-fabric by automatically correlating incidents into an event and the comprehensive event framework control granted by setting the event policies.
The controller analyzes the incoming incidents from the ION devices to determine if they are related and then it aggregates the incidents into a single incident in real time. For example, if the controller receives multiple VPN down incidents, the controller analyzes the incident in real time, determines if they are related, and generates a single Secure Fabric Link incident for the event, while suppressing the original list of incidents.
Prisma SD-WAN incidents correlate with custom and generic SNMP traps.
IncidentRAISE /CLEARSNMP TRAPS
DEVICEHW_INTERFACE_DOWNRaiselinkDown
ClearlinkUp
DEVICESW_GENERAL_PROCESSRESTARTRaisecgxProcessStop
DEVICESW_SYSTEM_BOOTRaisewarmStart
NETWORK_DIRECTINTERNET_DOWNRaisecgxPublicWanDown
ClearcgxPublicWanUp
NETWORK_DIRECTPRIVATE_DOWNRaisecgxPrivateWanDown
ClearcgxPrivateWanUp
NETWORK_PRIVATEWAN_DEGRADEDRaisecgxPrivateWanDegraded
ClearcgxPrivateWanDegradedClear
NETWORK_PRIVATEWAN_UNREACHABLERaisecgxPrivateWanUncreachable
ClearcgxPrivateWanUncreachableClear
NETWORK_PRIVATEWAN_UNREACHABLERaisecgxPrivateWanUncreachable
ClearcgxPrivateWanUncreachableClear
NETWORK_VPNBFD_DOWN can be suppressed by SECURE_FABRIC_LINK_DEGRADED or SECURE_FABRIC_LINK_DOWNRaisecgxVpnBfdDown
ClearcgxVpnBfdUp
NETWORK_VPNLINK_DOWN can be suppressed by SECURE_FABRIC_LINK_DEGRADED or SECURE_FABRIC_LINK_DOWNRaisecgxVpnLinkDown
ClearcgxVpnLinkUp
NETWORK_VPNPEER_UNREACHABLE can be suppressed by SECURE_FABRIC_LINK_DEGRADED or SECURE_FABRIC_LINK_DOWNRaisecgxVpnPeerUnreachable
ClearcgxVpnPeerUnreachableClear