Aruba Clearpass
Plugin: go.d.plugin Module: snmp
Overview
Monitor Aruba Clearpass (clearpass) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 1 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.
Netdata's SNMP collector matches the device to the aruba-clearpass.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.
This integration is supported on all platforms.
This integration supports multiple instances configured side-by-side.
Default Behavior
Auto-Detection
Auto-detected as Aruba Clearpass via sysObjectID/sysDescr.
Limits
The default configuration for this integration does not impose any limits.
Performance Impact
The default configuration for this integration is not expected to impose a significant performance impact on the system.
Setup
You can configure the snmp collector in two ways:
| Method | Best for | How to |
|---|---|---|
| UI | Fast setup without editing files | Go to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job. |
| File | If you prefer configuring via file, or need to automate deployments (e.g., with Ansible) | Edit go.d/snmp.conf and add a job. |
UI configuration requires paid Netdata Cloud plan.
Prerequisites
SNMP access
SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site's SNMP hub.
Configuration
Options
Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.
via UI
Configure the snmp collector from the Netdata web interface:
- Go to Nodes.
- Select the node where you want the snmp data-collection job to run and click the ⚙ (Configure this node). That node will run the data collection.
- The Collectors → Jobs view opens by default.
- In the Search box, type snmp (or scroll the list) to locate the snmp collector.
- Click the + next to the snmp collector to add a new job.
- Fill in the job fields, then click Test to verify the configuration and Submit to save.
- Test runs the job with the provided settings and shows whether data can be collected.
- If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.
via File
The configuration file name for this integration is go.d/snmp.conf.
The file format is YAML. Generally, the structure is:
update_every: 1
autodetection_retry: 0
jobs:
- name: some_name1
- name: some_name2
You can edit the configuration file using the edit-config script from the
Netdata config directory.
cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf
Examples
There are no configuration examples.
Alerts
There are no alerts configured by default for this integration.
Metrics
On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Aruba Clearpass profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.
78 metrics in 11 groups; each row is a chart context usable in alerts.
| Group | Metrics |
|---|---|
| Network / Interface | 4 |
| Network / RADIUS | 9 |
| Network / Routing | 10 |
| Network / TACACS | 11 |
| Network / Traffic | 1 |
| Security / Policy | 23 |
| System / CPU | 1 |
| System / Disk | 2 |
| System / Memory | 4 |
| System / Uptime | 1 |
| Uncategorized | 12 |
Network / Interface
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ifAdminStatus | {status} | per interface, interface | Current administrative state of the interface |
snmp.device_prof_ifHighSpeed | bit/s | per interface, interface | Estimate of the interface's current bandwidth |
snmp.device_prof_ifNumber | {interface} | device | Number of network interfaces regardless of their current state present on this system |
snmp.device_prof_ifOperStatus | {status} | per interface, interface | Current operational state of the interface |
Network / RADIUS
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_radAuthCounterCount | {authentication}/s | per rad_auth_source_name | Total number of RADIUS authentications |
snmp.device_prof_radAuthCounterFailure | {authentication}/s | per rad_auth_source_name | Total number of failed RADIUS authentications |
snmp.device_prof_radAuthCounterSuccess | {authentication}/s | per rad_auth_source_name | Total number of successful RADIUS authentications |
snmp.device_prof_radAuthCounterTime | ms | per rad_auth_source_name | Time taken to authenticate against an authentication source in milliseconds |
snmp.device_prof_radAuthRequestTime | ms | per cppm_system_hostname | Total time taken for RADIUS request end-to-end in milliseconds |
snmp.device_prof_radPolicyEvalTime | ms | per cppm_system_hostname | Total time taken for policy evaluation from RADIUS server perspective in milliseconds |
snmp.device_prof_radServerCounterCount | {request}/s | per cppm_system_hostname | Total RADIUS request count |
snmp.device_prof_radServerCounterFailure | {request}/s | per cppm_system_hostname | Failed RADIUS request count |
snmp.device_prof_radServerCounterSuccess | {request}/s | per cppm_system_hostname | Successful RADIUS request count |
Network / Routing
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ospfIfLsaCount | {advertisement}/s | per ospf_ip_addr, neighbor_id | The total number of link-local link state advertisements in this interface's link-local link state database |
snmp.device_prof_ospfIfState | {status} | per ospf_ip_addr, neighbor_id | The OSPF Interface State |
snmp.device_prof_ospfNbrEvents | {event}/s | per neighbor_id, neighbor_ip | The number of times this neighbor relationship has changed state or an error has occurred |
snmp.device_prof_ospfNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfNbrState | {status} | per neighbor_id, neighbor_ip | The state of the relationship with this neighbor |
snmp.device_prof_ospfVirtIfLsaCount | {advertisement}/s | per neighbor_id | The total number of link-local link state advertisements in this virtual interface's link-local link state database |
snmp.device_prof_ospfVirtIfState | {status} | per neighbor_id | OSPF virtual interface states |
snmp.device_prof_ospfVirtNbrEvents | {change}/s | per neighbor_id, neighbor_ip | The number of times this virtual link has changed its state or an error has occurred |
snmp.device_prof_ospfVirtNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfVirtNbrState | {status} | per neighbor_id, neighbor_ip | The state of the virtual neighbor relationship |
Network / TACACS
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_tacAuthCounterAuthTime | ms | per cppm_system_hostname | Time taken for TACACS+ authentications in milliseconds |
snmp.device_prof_tacAuthCounterCount | {authentication}/s | per cppm_system_hostname | Total number of TACACS+ authentications |
snmp.device_prof_tacAuthCounterFailure | {authentication}/s | per cppm_system_hostname | Total number of failed TACACS+ authentications |
snmp.device_prof_tacAuthCounterSuccess | {authentication}/s | per cppm_system_hostname | Total number of successful TACACS+ authentications |
snmp.device_prof_tacAuthCounterTime | ms | per cppm_system_hostname | Total time taken to perform TACACS+ authentications end-to-end in milliseconds |
snmp.device_prof_tacAutzCounterCount | {authorization}/s | per cppm_system_hostname | Total number of TACACS+ authorizations |
snmp.device_prof_tacAutzCounterFailure | {authorization}/s | per cppm_system_hostname | Total number of failed TACACS+ authorizations |
snmp.device_prof_tacAutzCounterSuccess | {authorization}/s | per cppm_system_hostname | Total number of successful TACACS+ authorizations |
snmp.device_prof_tacAutzCounterTime | ms | per cppm_system_hostname | Total time taken to perform TACACS+ authorization end-to-end in milliseconds |
snmp.device_prof_tacPolicyEvalTime | ms | per cppm_system_hostname | Time taken for TACACS+ policy evaluation in milliseconds |
snmp.device_prof_tacServicePolicyEvalTime | ms | per cppm_system_hostname | Time taken for TACACS+ service policy evaluation in milliseconds |
Network / Traffic
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_nwTrafficTotal | By/s | per nw_app_name, nw_app_port_number | Total network traffic in bytes |
Security / Policy
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_dailyFailedAuthCount | {authentication}/s | per cppm_system_hostname | Total number of failed authentications computed over 24 hours |
snmp.device_prof_dailySuccessAuthCount | {authentication}/s | per cppm_system_hostname | Total number of successful authentications computed over 24 hours |
snmp.device_prof_dailyTotalAuthCount | {authentication}/s | per cppm_system_hostname | Total number of authentications computed over 24 hours |
snmp.device_prof_psAuditPolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of audit policies evaluated |
snmp.device_prof_psAuditPolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of audit policies in milliseconds |
snmp.device_prof_psAuthCounterFailure | {authentication}/s | per cppm_system_hostname | Total number of failed authentications computed on the Policy Server |
snmp.device_prof_psAuthCounterSuccess | {authentication}/s | per cppm_system_hostname | Total number of successful authentications computed on the Policy Server |
snmp.device_prof_psAuthCounterTotal | {authentication}/s | per cppm_system_hostname | Total number of authentications computed on the Policy Server |
snmp.device_prof_psAutzCounterCount | {authorization}/s | per ps_autz_source_name | Total number of Policy authorizations |
snmp.device_prof_psAutzCounterFailure | {authorization}/s | per ps_autz_source_name | Total number of failed Policy authorizations |
snmp.device_prof_psAutzCounterSuccess | {authorization}/s | per ps_autz_source_name | Total number of successful Policy authorizations |
snmp.device_prof_psAutzCounterTime | ms | per ps_autz_source_name | Time taken for Policy authorizations in milliseconds |
snmp.device_prof_psEnforcementPolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of enforcement policies evaluated |
snmp.device_prof_psEnforcementPolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of enforcement policies in milliseconds |
snmp.device_prof_psPosturePolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of posture policies evaluated |
snmp.device_prof_psPosturePolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of posture policies in milliseconds |
snmp.device_prof_psRestrictionPolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of restriction policies evaluated |
snmp.device_prof_psRestrictionPolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of restriction policies in milliseconds |
snmp.device_prof_psRolemappingPolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of role mapping policies evaluated |
snmp.device_prof_psRolemappingPolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of role mapping policies in milliseconds |
snmp.device_prof_psServicePolicyEvalCount | {policy}/s | per cppm_system_hostname | Total number of service policies evaluated |
snmp.device_prof_psServicePolicyEvalTime | ms | per cppm_system_hostname | Time taken for the evaluation of service policies in milliseconds |
snmp.device_prof_psSessionlogTime | ms | per cppm_system_hostname | Time taken for session logging in milliseconds |
System / CPU
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_cpu_usage | % | device | The current CPU utilization |
System / Disk
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_cppmSystemDiskSpaceFree | By | per cppm_system_hostname | Amount of free disk space in bytes in the ClearPass server |
snmp.device_prof_cppmSystemDiskSpaceTotal | By | per cppm_system_hostname | Total amount of disk space available in bytes in the ClearPass server |
System / Memory
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_cppmSystemMemoryFree | By | per cppm_system_hostname | Amount of free memory in bytes in the ClearPass server |
snmp.device_prof_cppmSystemMemoryTotal | By | per cppm_system_hostname | Total amount of memory available in bytes in the ClearPass server |
snmp.device_prof_memAvailReal | By | device | Amount of real physical memory currently unused or available |
snmp.device_prof_memTotalReal | By | device | Total amount of real physical memory installed on this host |
System / Uptime
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_systemUptime | s | device | Time since the system was last rebooted or powered on. |
Uncategorized
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_lldpStatsRemTablesAgeouts | — | device | |
snmp.device_prof_lldpStatsRemTablesDeletes | — | device | |
snmp.device_prof_lldpStatsRemTablesDrops | — | device | |
snmp.device_prof_lldpStatsRemTablesInserts | — | device | |
snmp.device_prof_lldpStatsRemTablesLastChangeTime | — | device | |
snmp.device_prof_lldpStatsRxPortAgeoutsTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesDiscardedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesErrors | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortTLVsDiscardedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortTLVsUnrecognizedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsTxPortFramesTotal | — | per lldp_loc_port_num |
Do you have any feedback for this page? If so, you can open a new issue on our netdata/learn repository.