Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to identify high CPU, Packet Buffer, and Packet Descriptor ... - Knowledge Base - Palo Alto Networks

How to identify high CPU, Packet Buffer, and Packet Descriptor in the firewall with Strata Cloud Manager

10825
Created On 08/25/22 03:15 AM - Last Modified 09/15/23 02:09 AM


Objective


  • Identify the essential firewall resources needed to forward a data plane packet that Strata Cloud Manager monitors. 
  • Using the Strata Cloud Manager premium health alerts below, we will identify possible resource depletion
    • Increased Traffic Latency - Packet Buffer
    • Increased Traffic Latency - Packet Descriptor
    • Increased Traffic Latency - Packet Descriptor (on-chip)
  • Using the Strata Cloud Manager free health alert below, we will identify possible resource depletion
    • Dataplane CPU Utilization
    • Management Plane CPU Usage


Environment




Procedure


1. Check Memory resources in Strata Cloud Manager GUI
  1. Go to Alerts > Health > Add Filter > Serial > Select Serial > check the appropriate Serial and verify if any of the following Alert Name is present:
  • Increased Traffic Latency - Packet Buffer
  • Increased Traffic Latency - Packet Descriptor
  • Increased Traffic Latency - Packet Descriptor (on-chip)
If yes, click on the Alert Name and under RECOMMENDATIONS follow the solution provided.
2. Check CPU resources in Strata Cloud Manager GUI:
  1. Go to Monitor > Health > Grouped by: Model > click on the appropriate PA model > click on the appropriate Hostname > click on the Serial Number [highlighted in blue]
CPU1.png
  1. Under Metric Name > click on Select Metric Name > type CPU > check Dataplane Average CPU Utilization
  2. Under Metrics for this Device > click on Dataplane Average CPU Utilization
cpu2.png
  1. With the data/graph obtained, are there any spikes in the CPU that we can correlate with the issue?
  2. Repeat the above Steps, under 2.c., instead of using Dataplane CPU Utilization, use Management Plane CPU Usage.
CPU3.png


Additional Information


Tips and Tricks: AIOps for NGFW
Which team to open a ticket to for AIOps-related issues?


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sYrHCAU&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language