Event Category-Policy
Focus
Focus

Event Category-Policy

Table of Contents

Event Category-Policy

See the list of policy event codes in Prisma SD-WAN.
The following tables describe a list of event or incident codes, the event origin, its severity, and a description of each event as per the event category.
Event Category-Policy
INCIDENT CODEEVENT ORIGININCIDENT /ALERTSEVERITYEVENT TITLEEVENT DESCRIPTIONRELEASE INTRODUCED
FLAP_RATE_
EXCEEDED
ControllerINCIDENT WarningFlap Rate ExceededIncident is raised when an entity flaps more than the rate configured in the flap rule.5.5.1
NAT_POLICY_
LEGACY_ALG_
CONFIG_OVERRIDE
DeviceALERTWarningNAT policy ALG action overridden by legacy configuration.ALG action configured in the NAT policy has been overridden by legacy configuration present on the device.5.2.1
NETWORK_
POLICY_RULE_
CONFLICT
DeviceINCIDENT InformationalNetwork policy rule conflict.Two or more policy rules conflict in a policy set, resulting in an incorrect policy applied to some flows.5.0.1
NETWORK_POLICY_
RULE_DROPPED
DeviceINCIDENT WarningNetwork policy rule dropped.Network policy configuration contains rules with too many permutations causing resources to exceed the operational limits. Some rules are dropped from the policy so that the limits are not exceeded. As a result, desired policy actions may not be applied in some cases.5.0.1
PRIORITY_POLICY_
RULE_CONFLICT
DeviceINCIDENT InformationalPriority policy rule conflict.Two or more policy rules conflict in a priority policy set, potentially resulting in an incorrect policy applied to some flows.5.0.1
PRIORITY_POLICY_
RULE_DROPPED
DeviceINCIDENT WarningPriority policy rule dropped.Priority policy configuration contains rules with too many permutations causing resources to exceed the operational limits. Some rules are dropped from the policy so that the limits are not exceeded. As a result, desired policy actions may not be applied in some cases.5.0.1
SECURITY_POLICY_
RULE_
INCOMPLETE
DeviceINCIDENT CriticalThe security policy rule configuration is incomplete.The security policy rule configuration is incomplete. In this case the security policy rule is skipped.5.4.3
SECURITY_POLICY_
LIMITS_EXCEEDED
DeviceINCIDENT CriticalThe security policy stack exceeds resource limitsThe resources need to be installed in security policy stack as it exceeds the system limits. Security policy will not be installed. Element will have no security policy until the condition exists.5.6.1
CIRCUIT_
PERFORMANCE_
DEGRADED
DeviceINCIDENTCriticalThe circuit performance is degraded.The configured thresholds in the performance policy SLA is violated. This includes Link Quality metric thresholds for latency, jitter, and packet loss.6.3.1
APPLICATION_
PERFORMANCE_
DEGRADED
DeviceINCIDENTCriticalThe application performance is degraded.The configured thresholds in the performance policy SLA is violated. This involves the rtt and init failure rate of the app thresholds. From 6.4.1 release version, it includes UDP TRT failure rate of the app threshold.6.3.1
CARRIER_
PERFORMANCE_
DEGRADED
ControllerINCIDENTCriticalThe carrier performance is degraded.When the CIRCUIT_PERFORMANCE_DEGRADED alarm is present for more than one circuit (site WAN interface) for a tenant, then the alarm is generated to indicate that the WAN carrier performance is degraded. 6.3.1
SYSTEM_CPU_
THRESHOLD_
EXCEEDED
DeviceIncidentWarningThe system CPU threshold is exceeded. The configured CPU utilization threshold in the performance policy is violated.6.4.1
SYSTEM_
MEMORY_
THRESHOLD_
EXCEEDED
DeviceIncidentWarningThe system memory threshold is exceeded. The configured memory utilization threshold in the performance policy is violated. 6.4.1
SYSTEM_DISK_
THRESHOLD_
EXCEEDED
DeviceIncidentWarningThe system disk threshold is exceeded. The configured disk utilization threshold in the performance policy is violated. 6.4.1
SYSTEM_
CIRCUIT
_UTILIZATION
_THRESHOLD
_EXCEEDED
DeviceIncidentWarningThe site circuit utilization threshold is exceeded. The configured circuit utilization threshold in the performance policy is violated. 6.4.1
SYSTEM_
CONCURRENT_
FLOW_THRESHOLD
_EXCEEDED
DeviceIncidentWarningThe system concurrent flow threshold is exceeded. The configured concurrent flow utilization threshold in the performance policy is violated.6.4.1