Blade(s) down-paloaltonetworks-panos
Vendor: paloaltonetworks
OS: panos
Description:
Indeni will alert one or more blades in a chassis is down.
Remediation Steps:
Review the cause for the blades being down.
How does this work?
This script logs into the Palo Alto Networks device using SSH and retrieves the output of the “show log system subtype equal hw direction equal backward csv-output equal yes opaque contains Slot receive_time in last-hour” command. The output includes logs from the past one hour. The CLI command will get only the logs related to this issue, I used the filter “csv-output” as it will easier to deal with csv than regular output with spaces/tabs. The desired state is when “Slot # is up” is assigned a value of 1, anything else will be assigned a value of 0.
Why is this important?
Dataplane restarts can cause network outages, and it is important to immediately detect this type of failures and address them asap. This failure can be hardware/software and customers who receive this alert need to engage vendor support to invistigate the root cause of this restart.
Without Indeni how would you find this?
An administrator could physically view the LED lights for alarm status. Or by looking at the system logs from GUI or CLI.
panos-show-log-system-subtype-equal-hw
name: panos-show-log-system-subtype-equal-hw
description: Query system logs for any slot failure
type: monitoring
monitoring_interval: 5 minutes
requires:
vendor: paloaltonetworks
os.name: panos
product: firewall
comments:
blade-state:
why: |
Dataplane restarts can cause network outages, and it is important to immediately detect this type of failures and address them asap. This failure can be hardware/software and customers who receive this alert need to engage vendor support to invistigate the root cause of this restart.
how: |
This script logs into the Palo Alto Networks device using SSH and retrieves the output of the "show log system subtype equal hw direction equal backward csv-output equal yes opaque contains Slot receive_time in last-hour" command. The output includes logs from the past one hour. The CLI command will get only the logs related to this issue, I used the filter "csv-output" as it will easier to deal with csv than regular output with spaces/tabs. The desired state is when "Slot # is up" is assigned a value of 1, anything else will be assigned a value of 0.
can-with-snmp: false
can-with-syslog: true
steps:
- run:
type: SSH
command: show log system subtype equal hw direction equal backward csv-output
equal yes opaque contains Slot receive_time in last-hour
parse:
type: AWK
file: show-log-system-subtype-eq-hw.parser.1.awk
chassis_blade_down
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/chassis_blade_down.scala