Focus

PAN-OS Device Telemetry Metrics Reference

Security Policy Usage and Hit Count

Table of Contents

Security Policy Usage and Hit Count

Reports hit counts for all security policy rules in vsys1, showing how many sessions matched each rule, used to identify unused rules or high-traffic policy entries. Identifies stale or unused security policies. Also identifies the policies that are used the most. Show rule hit counter along with all rule names and when it got created or last accessed

Metric Details

Category	Device Health and Performance
Frequency	Daily
Telemetry Tier	Diagnostic / Full
Equivalent CLI Command	show rule-hit-count vsys vsys-name vsys1 rule-base security rules all show running rule-use hit-count rule-base security rules all vsys vsys1 show running rule-use hit-count rule-base security vsys vsys1 rules all

Security Policy Usage and Hit Count

Session Distribution