Drastic drop in concurrent connections-paloaltonetworks-panos
Alert when a drop was detected in the number of concurrent connections.
Review why this may be happening.
How does this work?
This alert uses the Palo Alto Networks API to retrieve the current utilization of the number of sessions allowed in total.
Why is this important?
Tracking the number of concurrent connections is helpful in understanding traffic patterns and load.
Without Indeni how would you find this?
To know what is the current utilization of sessions on a Palo Alto Networks firewall, the user will normally use the CLI. A script could be written to track this data on an ongoing basis.
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/parsers/src/panw/panos/show-session-info/show-session-info.ind.yaml
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/sync_core_rules/core/ConcurrentConnectionsDrasticChangeDownRule.scala