I pretty much kept the default file but trimmed out all the other modules I
didn't need, as well as added specs for v3:
modules:
# Default IF-MIB interfaces table with ifIndex.
if_mib:
walk: [sysUpTime, interfaces, ifXTable]
lookups:
- source_indexes: [ifIndex]
lookup: ifAlias
- source_indexes: [ifIndex]
# Uis OID to avoid conflict with PaloAlto PAN-COMMON-MIB.
lookup: 1.3.6.1.2.1.2.2.1.2 # ifDescr
- source_indexes: [ifIndex]
# Use OID to avoid conflict with Netscaler NS-ROOT-MIB.
lookup: 1.3.6.1.2.1.31.1.1.1.1 # ifName
overrides:
ifAlias:
ignore: true # Lookup metric
ifDescr:
ignore: true # Lookup metric
ifName:
ignore: true # Lookup metric
ifType:
type: EnumAsInfo
# Palo Alto Firewalls
#
# Palo Alto MIBs can be found here:
# https://www.paloaltonetworks.com/documentation/misc/snmp-mibs.html
#
paloalto_fw:
walk:
- sysUpTime
- interfaces
- hrDevice
- hrSystem
- hrStorage
- 1.3.6.1.4.1.25461.2.1.2.1 # panSys
- 1.3.6.1.4.1.25461.2.1.2.3 # panSession
- 1.3.6.1.4.1.25461.2.1.2.5 # panGlobalProtect
version: 3
auth:
username: snmp_exporter
security_level: authPriv
password: pass
auth_protocol: SHA
priv_protocol: AES
priv_password: pass
On Tue, Dec 15, 2020 at 12:15 PM Ben Kochie <[email protected]> wrote:
> Can you share your generator.yml? There are some options for working
> around duplicate names.
>
> I did find a similar issue in another MIB. I'm thinking we may need some
> additional changes to better handle some of these edge cases.
>
> On Tue, Dec 15, 2020, 02:09 Cris <[email protected]> wrote:
>
>> Hi all,
>>
>> I am currently trying to collect snmp data off of a Palo Alto Firewall on
>> PAN-OS 9.0. I have downloaded snmp-exporter, built the generator, and
>> edited the Makefile for mibs to grab the correct mibs files for my setup.
>>
>> I currently get the following errors when navigating to
>> *localhost:9116/snmp?target=*<IP>*&module=paloalto_fw- *see attached.
>>
>> Upon further inspection of those specific OIDs, it has come to my
>> attention that Palo Alto has* reused the variable names* "ifIndex" and
>> "ifDescr" for their propietary OIDs. These variable names are already
>> allocated to objects under OID .1.3.6.1.2.1.2.2). Palo Alto has them under
>> OID .1.3.6.1.4.1.25461.2.1.2.3.11 (panIfTable). All of their other
>> variables are prefixed with "pan" except these.
>>
>> I have tried appending the fix in the Mibs file, but it just breaks the
>> generator. The variables are named the same in PAN-OS 10.0, so an OS update
>> won't help.
>>
>> *Is there any way to bypass this other than walking around those
>> particular OIDs? *Ideally, I would like to scrape all the info I
>> possibly could.* Does snmp_exporter scrape the rest of the data
>> regardless of errors?*
>>
>> Thanks in advance.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Prometheus Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/prometheus-users/c2202dc2-e45d-42d2-a6a4-eb6b92a71d66n%40googlegroups.com
>> <https://groups.google.com/d/msgid/prometheus-users/c2202dc2-e45d-42d2-a6a4-eb6b92a71d66n%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>>
>
--
You received this message because you are subscribed to the Google Groups
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/prometheus-users/CAAZZdk-bU3Oqb-_Fo%2B8OwtH2VD6xyOWZpFu1G9NX9uM%3DbykGVg%40mail.gmail.com.
