What commands are used to determine data plane resource utilization?
20881
Created On 08/18/22 03:20 AM - Last Modified 10/28/22 19:42 PM
Question
What CLI commands are used to determine what the data plane resource utilization?
Environment
Palo Alto Firewall
Answer
Determine which command to use based on your Firewall model
- Single CPU shared between MP and DP (VM-100, VM-200, VM-300, VM-500, PA-220, PA-440, PA-450, PA-460, PA-850)
> less mp-log dp-monitor.log
- Single-DP Platforms (PA-3220, PA-3250, PA-3260)
> less dp-log dp-monitor.log
- Single-DP Platform (PA-5220)
> less dp0-log dp-monitor.log
- Multi-DP Platform (PA-5250)
> less dp0-log dp-monitor.log > less dp1-log dp-monitor.log
- Multi-DP Platform (PA-5260)
> less dp0-log dp-monitor.log > less dp1-log dp-monitor.log > less dp2-log dp-monitor.log
- Multi-DP and Multi-Slot (PA-5450)
> less sXdp0-log dp-monitor.log > less sXdp1-log dp-monitor.log
Note: X above is the slot number of the DPC available in the Firewall; you can use > show chassis inventory (DPCs are normally inserted between slots 2-6) - Multi-DP and Multi-Slot (PA-7050 PA-7080)
> less sXdp0-log dp-monitor.log > less sXdp1-log dp-monitor.log
Note: X above is the slot number of the NPC available in the Firewall; you can use > show chassis inventory (NPCs are usually inserted between slots 1-3 and 5-7 for PA-7050; slots 1-5 and 8-12 for PA-7080)