Monitor Panorama and Log Collector Statistics Using SNMP

Configure the SNMP Manager to get statistics from Panorama and the Log Collectors.
The following steps are an overview of the tasks you perform on the SNMP manager. For the specific steps, refer to the documentation of your SNMP manager.
To enable the SNMP manager to interpret statistics, load the Supported MIBs and, if necessary, compile them.
For each Panorama appliance that the SNMP manager will monitor, define its connection settings (IP address and port) and authentication settings (SNMPv2c community string or SNMPv3 username and password). All Panorama appliances use port 161.
The SNMP manager can use the same or different connection and authentication settings for multiple Panorama management servers and Log Collectors. The settings must match those you define when you configure SNMP on Panorama (see Configure the Panorama management server to respond to statistics requests from an SNMP manager. and Configure the Dedicated Log Collectors (if any) to respond to SNMP requests.). For example, if you use SNMPv2c, the community string you define when configuring Panorama must match the community string you define in the SNMP manager for Panorama.
Determine the object identifiers (OIDs) of the statistics you will monitor. For example, to monitor the logging rate, a MIB browser shows that this statistic corresponds to OID 1.3.6.1.4.1.25461.2.3.30.1.1 in PAN-PRODUCT-MIB.my. For details, see Use an SNMP Manager to Explore MIBs and Objects.
Configure the SNMP manager to monitor the desired OIDs.
Enable SNMP traffic on the management (MGT) interface of the Panorama management server.
Select
Panorama
Setup
Management
and edit the Management Interface Settings.
In the Services section, select the
SNMP
check box and click
OK
.
Enable SNMP traffic on the management (MGT) interface of any M-Series appliances in Log Collector mode:
Select
Panorama
Managed Collectors
and select the Log Collector.
Select the
Management
tab, select the
SNMP
check box, and click
OK
.
Configure the Panorama management server to respond to statistics requests from an SNMP manager.
Select
Panorama
Setup
Operations
and, in the Miscellaneous section, click
SNMP Setup
.
Select the SNMP
Version
and configure the authentication values as follows. For version details, see SNMP Support.
V2c
—Enter the
SNMP Community String
, which identifies a community of SNMP managers and monitored devices (Panorama, in this case), and serves as a password to authenticate the community members to each other.
Don’t use the default community string
public
; it is well known and therefore not secure.
V3
—Create at least one SNMP view group and one user. User accounts and views provide authentication, privacy, and access control when SNMP managers get statistics.
Views
—Each view is a paired OID and bitwise mask: the OID specifies a MIB, and the mask (in hexadecimal format) specifies which objects are accessible inside (include matching) or outside (exclude matching) that MIB. Click
Add
in the first list and enter a
Name
for the group of views. For each view in the group, click
Add
and configure the view
Name
,
OID
, matching
Option
(
include
or
exclude
), and
Mask
.
Users
—Click
Add
in the second list, enter a username in the Users column, select the
View
group from the drop-down, enter the authentication password (
Auth Password
) used to authenticate to the SNMP manager, and enter the privacy password (
Priv Password
) used to encrypt SNMP messages to the SNMP manager.
Click
OK
to save the settings.
Configure the Dedicated Log Collectors (if any) to respond to SNMP requests.
For each Collector Group:
Select
Panorama
Collector Groups
and select the Collector Group.
Select the
Monitoring
tab, configure the same settings as in Step Configure the Panorama management server to respond to statistics requests from an SNMP manager., and click
OK
.
Commit the changes to Panorama and push the changes to Collector Groups.
Select
Commit
Commit and Push
and
Edit Selections
in the Push Scope.
Select
Collector Groups
you, select the Collector Groups you edited, and click
OK
.
Commit and Push
your changes.
Monitor the Panorama and Log Collector statistics in an SNMP manager.
Refer to the documentation of your SNMP manager.