Palo Alto firewalls

✨ New in this version:

• Added dimensions ha.peerstate, app.version, threat.version, av.version, wf.version and urlfiltering.version to the metric com.dynatrace.extension.palo-alto.generic.sys.release.dates. These dimension values will now show as attributes of the Palo Alto Device entity.
• Added charts for logging metrics to the Palo Alto Device entity screen.

🚀 Improved in this version:

• The com.dynatrace.extension.network_device.sysuptime and com.dynatrace.extension.palo-alto.generic.sys.uptime now represent the time since the device was started (OID 1.3.6.1.2.1.25.1.1.0) as opposed to the time since the SNMP service was started (OID 1.3.6.1.2.1.1.3.0).

ℹ️ This version requires ActiveGate version 1.290.0 or higher.

🚀 Improved in this version:

• To better control licensing costs the following changes have been made to the extension's feature sets:
  • The generic interface metrics were moved from the default feature set to interface.
  • Added new feature set hardware to which the power consumption and sensor metrics were moved.
    • ⚠️ When automatically upgrading existing configurations, the new feature set will be disabled by default. To continue monitoring power consumption and sensor metrics you will need to manually update each monitoring configuration and enable the new feature set after upgrading. ⚠️
• Added a status dimension to the com.dynatrace.extension.palo-alto.generic.cpu.system.utilization and com.dynatrace.extension.palo-alto.generic.cpu.management.utilization metrics corresponding to OID 1.3.6.1.2.1.25.3.2.1.5.

🪲 Fixed in this version:

• Fixed bug where interface attributes would sometimes not be populated.

ℹ️ This version requires ActiveGate version 1.290.0 or higher.

✨ New in this version:

• Added power usage metrics com.dynatrace.extension.palo-alto.generic.power.available and com.dynatrace.extension.palo-alto.generic.power.used and corresponding charts as part of the general feature set.
• Added metrics com.dynatrace.extension.palo-alto.generic.gateway.utilization, com.dynatrace.extension.palo-alto.generic.sessions.utilization, com.dynatrace.extension.palo-alto.generic.sessions.proxy as part of the gateway feature set.
• Added interface packet metrics com.dynatrace.extension.palo-alto.generic.if.in.ucast.packets.count and com.dynatrace.extension.palo-alto.generic.if.out.ucast.packets.count and corresponding charts as part of the interface feature set.
• Added metrics com.dynatrace.extension.palo-alto.generic.mem.allocation.units and com.dynatrace.extension.palo-alto.generic.mem.allocation.failures.count as part of the memory feature set.
• Added a new feature set zone with metrics com.dynatrace.extension.palo-alto.generic.zone.active.tcp.cps, com.dynatrace.extension.palo-alto.generic.zone.active.udp.cps and com.dynatrace.extension.palo-alto.generic.zone.active.otherip.cps.
• Added a new feature set device-logging with metrics com.dynatrace.extension.palo-alto.generic.pandeviceincominglograte and com.dynatrace.extension.palo-alto.generic.pandevicewritelograte.
• Added a new feature set pan-sys with the metric com.dynatrace.extension.palo-alto.generic.sys.release.dates.
• New entities and metrics were added to represent Palo Alto as a network device

🚀 Improved in this version:

• Changed the interface speed dimension to use the ifHighSpeed OID 1.3.6.1.2.1.31.1.1.1.15 instead of 1.3.6.1.2.1.2.2.1.5.

Fixed bug where metrics weren't being picked up in management zones with Palo Alto entities.

Breaking changes

Dropped support for 32-bit counter octet in/out interface metrics. Only 64-bit counters are now supported. Only devices with Firewall PAN-OS version earlier than 8.1 will be affected.

The interface_high_capacity feature set was dropped as those metrics are now in the interface feature set. Before being able to upgrade your monitoring configurations you will need to manually disable the interface-high-capacity on those configurations (if enabled).

Breaking changes

The following metrics of the interface_high_capacity feature set are renamed

• com.dynatrace.extension.palo-alto.generic.if.in.octets to com.dynatrace.extension.palo-alto.generic.if.hc.in.octets
• com.dynatrace.extension.palo-alto.generic.if.out.octets to com.dynatrace.extension.palo-alto.generic.if.hc.out.octets
• com.dynatrace.extension.palo-alto.generic.if.in.err to com.dynatrace.extension.palo-alto.generic.if.hc.in.err
• com.dynatrace.extension.palo-alto.generic.if.out.err to com.dynatrace.extension.palo-alto.generic.if.hc.out.err
• com.dynatrace.extension.palo-alto.generic.if.in.discards to com.dynatrace.extension.palo-alto.generic.if.hc.in.discards
• com.dynatrace.extension.palo-alto.generic.if.out.discards to com.dynatrace.extension.palo-alto.generic.if.hc.out.discards

Any dashboards or metric events relying on these metrics will need to be reconfigured.

Customers not using the interface_high_capacity feature set are not affected.

Description

Renamed high capacity interface metrics, to fix a bug where having both the interface and interface_high_capacity feature sets enabled at the same time would cause inaccurate metrics to be ingested.

No release notes

No release notes

Fix for dashboard to be compatible with feature flags

• bugfix: added missing chartCards
• bugfix: added featureSet with high capacity interface metrics to fix data discrepancy

v0.4.0

• Added ability to use filters for Interface Name, Admin and Operational Status

Substract of suffix ".count" in metric com.dynatrace.extension.palo-alto.generic.sys.uptime and changed it type to gauge

• added alerts in 0.3.1.
• deleted sensors and memory entities and screens

1. New calculated metrics:

   • func:com.dynatrace.extension.palo-alto.generic.if.in.octets.bitpersec
   • func:com.dynatrace.extension.palo-alto.generic.if.out.octets.bitpersec
   • func:com.dynatrace.extension.palo-alto.generic.mem.utilization

2. Corrected oid for dimension: if.keyx

3. New dimension if.descr for subgroup interface

4. Added topology, relationships and screens

Version 0.1.15 (initial):

• SNMP DataSource configuration
• dashboard template