Why I am seeing a messages of Deviating device in Panorama system log?
60722
Created On 10/18/19 01:14 AM - Last Modified 03/28/24 14:24 PM
Question
Why I am seeing a messages of Deviating device in Panorama system log?
info general general Deviating device: Serial: xxxx, Object: interface 1/12, Metric: tx-bit-rate, Value: 2
info general general Deviating device: sha-plsxpan01b, Serial:xxxx , Object: interface 1/11, Metric: tx-bit-rate, Value: 2
info general general Deviating device: sha-plsxpan01b, Serial: xxxx, Object: s1 dp0, Metric: session-util, Value: 2
Environment
- Any Panorama.
- PAN-OS 8.1 or later.
Answer
This messages seen in the system logs are normal.
Device health monitoring feature introduced in PAN-OS 8.1 causes Panorama to monitor the hardware resources and performance of managed firewalls. Panorama centralizes time-trended performance information (CPU, memory, CPS, and throughput), logging performance, environmental information (such as fans, RAID status, and power supplies) and correlates events such as commits, content installs, and software upgrades to health data. When a firewall deviates from its calculated baseline, Panorama reports it as a Deviating Device to help identify, diagnose, and resolve any hardware issues quickly.
These settings cannot be configured. The Deviating Devices tab displays devices that have any metrics that are deviating from their calculated baseline and displays those deviating metrics in red. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation.
GUI:Panorama > Managed Devices > Health > Deviating Devices
Additional Information
Further information:
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/panorama-web-interface/panorama-managed-devices-summary/panorama-managed-devices-health