How to suppress Interface Alarms for Palo Alto Passive Links in Spectrum

Products

• CA Spectrum

Issue/Introduction

How to suppress Interface Alarms for Palo Alto Passive Links in Spectrum based on Device attribute (0x6520013) panSysHAState=passive:

 

Environment

Release : All

 

Resolution

1. Create Two real-time Global Collections.

Global Collection A will search for Devices with the passive attribute set (port monitoring disabled):

Global Collection B will search for Devices with the active attribute set (port monitoring enabled):

2.  Create a Policy that contains 2 rules:

Rule A Disables polling for devices with the passive flag set (Assign to the passive GC):

Rule B enabled port polling for devices with the active flag set (Assign to the active GC):

IMPORTANT:   

1.  Real-time Global Collections against external attributes should be used judiciously.  Performance issues can occur if the GC needs to poll too many external attributes via SNMP.

2.  When crafting the Global Collections limit the Palo Alto device type to only those that have the panSysHAState configured to minimize resources consumed by the Global Collections.

EXAMPLE: