Juniper SRX
Plugin: go.d.plugin Module: snmp
Overview
Monitor Juniper SRX (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 46 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.
Netdata's SNMP collector matches the device to the juniper-srx.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.
This integration is supported on all platforms.
This integration supports multiple instances configured side-by-side.
Default Behavior
Auto-Detection
Auto-detected as Juniper SRX via sysObjectID/sysDescr.
Limits
The default configuration for this integration does not impose any limits.
Performance Impact
The default configuration for this integration is not expected to impose a significant performance impact on the system.
Setup
You can configure the snmp collector in two ways:
| Method | Best for | How to |
|---|---|---|
| UI | Fast setup without editing files | Go to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job. |
| File | If you prefer configuring via file, or need to automate deployments (e.g., with Ansible) | Edit go.d/snmp.conf and add a job. |
important
UI configuration requires paid Netdata Cloud plan.
Prerequisites
SNMP access
SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site's SNMP hub.
Configuration
Options
Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.
via UI
Configure the snmp collector from the Netdata web interface:
- Go to Nodes.
- Select the node where you want the snmp data-collection job to run and click the ⚙ (Configure this node). That node will run the data collection.
- The Collectors → Jobs view opens by default.
- In the Search box, type snmp (or scroll the list) to locate the snmp collector.
- Click the + next to the snmp collector to add a new job.
- Fill in the job fields, then click Test to verify the configuration and Submit to save.
- Test runs the job with the provided settings and shows whether data can be collected.
- If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.
via File
The configuration file name for this integration is go.d/snmp.conf.
The file format is YAML. Generally, the structure is:
update_every: 1
autodetection_retry: 0
jobs:
- name: some_name1
- name: some_name2
You can edit the configuration file using the edit-config script from the
Netdata config directory.
cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf
Examples
There are no configuration examples.
Alerts
There are no alerts configured by default for this integration.
Metrics
On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Juniper SRX profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.
132 metrics in 11 groups; each row is a chart context usable in alerts.
| Group | Metrics |
|---|---|
| Network / Firewall | 2 |
| Network / IP | 28 |
| Network / Interface | 35 |
| Network / Routing | 10 |
| Network / TCP | 12 |
| Network / UDP | 6 |
| Network / VPN | 21 |
| System / Activity | 2 |
| System / CPU | 1 |
| System / Uptime | 1 |
| Uncategorized | 14 |
Network / Firewall
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_jnxUserFwLDAPFailedQuery | {query}/s | per ldap_domain_name, ldap_host | LDAP failed queries |
snmp.device_prof_jnxUserFwLDAPTotalQuery | {query}/s | per ldap_domain_name, ldap_host | Total LDAP queries |
Network / IP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ipSystemStatsHCInBcastPkts | {packet}/s | per ipversion | The number of IP broadcast datagrams received |
snmp.device_prof_ipSystemStatsHCInForwDatagrams | {forward}/s | per ipversion | Input datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo… |
snmp.device_prof_ipSystemStatsHCInMcastOctets | bit/s | per ipversion | The total number of octets received in IP multicast datagrams |
snmp.device_prof_ipSystemStatsHCInMcastPkts | {packet}/s | per ipversion | The number of IP multicast datagrams received |
snmp.device_prof_ipSystemStatsHCInOctets | bit/s | per ipversion | Octets received in input IP datagrams |
snmp.device_prof_ipSystemStatsHCInReceives | {packet}/s | per ipversion | Input IP datagrams received |
snmp.device_prof_ipSystemStatsHCOutBcastPkts | {packet}/s | per ipversion | The number of IP broadcast datagrams transmitted |
snmp.device_prof_ipSystemStatsHCOutForwDatagrams | {packet}/s | per ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
snmp.device_prof_ipSystemStatsHCOutMcastOctets | bit/s | per ipversion | The total number of octets transmitted in IP multicast datagrams |
snmp.device_prof_ipSystemStatsHCOutMcastPkts | {packet}/s | per ipversion | The number of IP multicast datagrams transmitted |
snmp.device_prof_ipSystemStatsHCOutOctets | bit/s | per ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
snmp.device_prof_ipSystemStatsHCOutRequests | {packet}/s | per ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
snmp.device_prof_ipSystemStatsHCOutTransmits | {packet}/s | per ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
snmp.device_prof_ipSystemStatsInAddrErrors | {error}/s | per ipversion | Input IP datagrams discarded due to invalid IP address in header |
snmp.device_prof_ipSystemStatsInDiscards | {error}/s | per ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
snmp.device_prof_ipSystemStatsInHdrErrors | {error}/s | per ipversion | Discarded input IP datagrams due to errors in their IP headers |
snmp.device_prof_ipSystemStatsInNoRoutes | {errors}/s | per ipversion | Input IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipSystemStatsInTruncatedPkts | {error}/s | per ipversion | Input IP datagrams discarded due to datagram frame not carrying enough data |
snmp.device_prof_ipSystemStatsInUnknownProtos | {error}/s | per ipversion | Locally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol |
snmp.device_prof_ipSystemStatsOutDiscards | {error}/s | per ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
snmp.device_prof_ipSystemStatsOutFragCreates | {fragment}/s | per ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
snmp.device_prof_ipSystemStatsOutFragFails | {error}/s | per ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
snmp.device_prof_ipSystemStatsOutFragOKs | {packet}/s | per ipversion | The number of IP datagrams that have been successfully fragmented |
snmp.device_prof_ipSystemStatsOutFragReqds | {packet}/s | per ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
snmp.device_prof_ipSystemStatsOutNoRoutes | {error}/s | per ipversion | The number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipSystemStatsReasmFails | {error}/s | per ipversion | The number of failures detected by the IP re-assembly algorithm |
snmp.device_prof_ipSystemStatsReasmOKs | {packet}/s | per ipversion | The number of IP datagrams successfully reassembled |
snmp.device_prof_ipSystemStatsReasmReqds | {fragment}/s | per ipversion | The number of IP fragments received that needed to be reassembled at this interface |
Network / Interface
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ifAdminStatus | {status} | per interface, interface | Current administrative state of the interface |
snmp.device_prof_ifHighSpeed | bit/s | per interface, interface | Estimate of the interface's current bandwidth |
snmp.device_prof_ifNumber | {interface} | device | Number of network interfaces regardless of their current state present on this system |
snmp.device_prof_ifOperStatus | {status} | per interface, interface | Current operational state of the interface |
snmp.device_prof_ipIfStatsHCInBcastPkts | {packet}/s | per interface_index, ipversion | The number of IP broadcast datagrams received |
snmp.device_prof_ipIfStatsHCInDelivers | {packet}/s | per interface_index, ipversion | The total number of datagrams successfully delivered to IP user-protocols including ICMP |
snmp.device_prof_ipIfStatsHCInForwDatagrams | {forward}/s | per interface_index, ipversion | The number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find… |
snmp.device_prof_ipIfStatsHCInMcastOctets | bit/s | per interface_index, ipversion | The total number of octets received in IP multicast datagrams |
snmp.device_prof_ipIfStatsHCInMcastPkts | {packet}/s | per interface_index, ipversion | The number of IP multicast datagrams received |
snmp.device_prof_ipIfStatsHCInOctets | bit/s | per interface_index, ipversion | The total number of octets received in input IP datagrams, including those received in error |
snmp.device_prof_ipIfStatsHCOutBcastPkts | {packet}/s | per interface_index, ipversion | The number of IP broadcast datagrams transmitted |
snmp.device_prof_ipIfStatsHCOutForwDatagrams | {packet}/s | per interface_index, ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
snmp.device_prof_ipIfStatsHCOutMcastOctets | bit/s | per interface_index, ipversion | The total number of octets transmitted in IP multicast datagrams |
snmp.device_prof_ipIfStatsHCOutMcastPkts | {packet}/s | per interface_index, ipversion | The number of IP multicast datagrams transmitted |
snmp.device_prof_ipIfStatsHCOutOctets | bit/s | per interface_index, ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
snmp.device_prof_ipIfStatsHCOutRequests | {packet}/s | per interface_index, ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
snmp.device_prof_ipIfStatsHCOutTransmits | {packet}/s | per interface_index, ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
snmp.device_prof_ipIfStatsInAddrErrors | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because the IP address in their IP header's destination field was not a valid address t… |
snmp.device_prof_ipIfStatsInDiscards | {error}/s | per interface_index, ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
snmp.device_prof_ipIfStatsInHdrErrors | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded due to errors in their IP headers |
snmp.device_prof_ipIfStatsInNoRoutes | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because no route could be found to transmit them to their destination |
snmp.device_prof_ipIfStatsInTruncatedPkts | {error}/s | per interface_index, ipversion | The number of input IP datagrams discarded because the datagram frame didn't carry enough data |
snmp.device_prof_ipIfStatsInUnknownProtos | {error}/s | per interface_index, ipversion | The number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol |
snmp.device_prof_ipIfStatsOutDiscards | {error}/s | per interface_index, ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
snmp.device_prof_ipIfStatsOutFragCreates | {fragment}/s | per interface_index, ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
snmp.device_prof_ipIfStatsOutFragFails | {packet}/s | per interface_index, ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
snmp.device_prof_ipIfStatsOutFragOKs | {packet}/s | per interface_index, ipversion | The number of IP datagrams that have been successfully fragmented |
snmp.device_prof_ipIfStatsOutFragReqds | {packet}/s | per interface_index, ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
snmp.device_prof_ipIfStatsReasmFails | {error}/s | per interface_index, ipversion | The number of failures detected by the IP re-assembly algorithm |
snmp.device_prof_ipIfStatsReasmOKs | {packet}/s | per interface_index, ipversion | The number of IP datagrams successfully reassembled |
snmp.device_prof_ipIfStatsReasmReqds | {fragment}/s | per interface_index, ipversion | The number of IP fragments received that needed to be reassembled at this interface |
snmp.device_prof_jnxDcuStatsBytes | By/s | per interface, address_family, destination_class_name | The number of bytes received on this interface, belonging to this address family that match this Destination Class |
snmp.device_prof_jnxDcuStatsPackets | {packet}/s | per interface, address_family, destination_class_name | The number of packets received on this interface, belonging to this address family that match this Destination Class |
snmp.device_prof_jnxScuStatsBytes | By/s | per interface, address_family | Number of bytes sent out of destination interface that match the source class and address family |
snmp.device_prof_jnxScuStatsPackets | {packet}/s | per interface, address_family | Number of packets sent out of destination interface that match the source class and address family |
Network / Routing
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_ospfIfLsaCount | {advertisement}/s | per ospf_ip_addr, neighbor_id | The total number of link-local link state advertisements in this interface's link-local link state database |
snmp.device_prof_ospfIfState | {status} | per ospf_ip_addr, neighbor_id | The OSPF Interface State |
snmp.device_prof_ospfNbrEvents | {event}/s | per neighbor_id, neighbor_ip | The number of times this neighbor relationship has changed state or an error has occurred |
snmp.device_prof_ospfNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfNbrState | {status} | per neighbor_id, neighbor_ip | The state of the relationship with this neighbor |
snmp.device_prof_ospfVirtIfLsaCount | {advertisement}/s | per neighbor_id | The total number of link-local link state advertisements in this virtual interface's link-local link state database |
snmp.device_prof_ospfVirtIfState | {status} | per neighbor_id | OSPF virtual interface states |
snmp.device_prof_ospfVirtNbrEvents | {change}/s | per neighbor_id, neighbor_ip | The number of times this virtual link has changed its state or an error has occurred |
snmp.device_prof_ospfVirtNbrLsRetransQLen | {message} | per neighbor_id, neighbor_ip | The current length of the retransmission queue |
snmp.device_prof_ospfVirtNbrState | {status} | per neighbor_id, neighbor_ip | The state of the virtual neighbor relationship |
Network / TCP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_tcpActiveOpens | {transition}/s | device | TCP connections transitioning from CLOSED to SYN-SENT |
snmp.device_prof_tcpAttemptFails | {failure}/s | device | Failed TCP connection attempts |
snmp.device_prof_tcpCurrEstab | {connection} | device | Current TCP connections in ESTABLISHED or CLOSE-WAIT state |
snmp.device_prof_tcpEstabResets | {reset}/s | device | TCP connections reset from ESTABLISHED/CLOSE-WAIT |
snmp.device_prof_tcpHCInSegs | {packet}/s | device | TCP segments received |
snmp.device_prof_tcpHCOutSegs | {packet}/s | device | TCP segments sent |
snmp.device_prof_tcpInErrs | {error}/s | device | TCP segments received with errors |
snmp.device_prof_tcpInSegs | {packet}/s | device | TCP segments received |
snmp.device_prof_tcpOutRsts | {reset}/s | device | TCP segments sent with RST flag |
snmp.device_prof_tcpOutSegs | {packet}/s | device | TCP segments sent |
snmp.device_prof_tcpPassiveOpens | {transition}/s | device | TCP connections transitioning from LISTEN to SYN-RCVD |
snmp.device_prof_tcpRetransSegs | {retransmit}/s | device | TCP segments retransmitted |
Network / UDP
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_udpHCInDatagrams | {packet}/s | device | UDP datagrams received |
snmp.device_prof_udpHCOutDatagrams | {packet}/s | device | UDP datagrams sent |
snmp.device_prof_udpInDatagrams | {packet}/s | device | UDP datagrams received |
snmp.device_prof_udpInErrors | {error}/s | device | UDP datagrams received but couldn't be delivered (not due to missing app) |
snmp.device_prof_udpNoPorts | {error}/s | device | UDP datagrams received with no app on the destination port |
snmp.device_prof_udpOutDatagrams | {packet}/s | device | UDP datagrams sent |
Network / VPN
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_jnxIkeNumOfTunnels | {tunnel} | device | Total number of active IKE Phase 1 tunnels |
snmp.device_prof_jnxIkeTunMonActiveTime | s | per ike_tunnel_index | Time this IKE Phase 1 tunnel has been active |
snmp.device_prof_jnxIkeTunMonDPDDownCount | {event}/s | per ike_tunnel_index | Number of DPD (Dead Peer Detection) down events on this tunnel |
snmp.device_prof_jnxIkeTunMonInOctets | By/s | per ike_tunnel_index | Number of bytes received on this IKE Phase 1 tunnel |
snmp.device_prof_jnxIkeTunMonInPkts | {packet}/s | per ike_tunnel_index | Number of packets received on this IKE Phase 1 tunnel |
snmp.device_prof_jnxIkeTunMonLifeTime | s | per ike_tunnel_index | Remaining lifetime of the IKE Phase 1 tunnel |
snmp.device_prof_jnxIkeTunMonOutOctets | By/s | per ike_tunnel_index | Number of bytes sent on this IKE Phase 1 tunnel |
snmp.device_prof_jnxIkeTunMonOutPkts | {packet}/s | per ike_tunnel_index | Number of packets sent on this IKE Phase 1 tunnel |
snmp.device_prof_jnxIkeTunMonState | {status} | per ike_tunnel_index | Current state of the IKE Phase 1 tunnel |
snmp.device_prof_jnxIpSecNumOfTunnels | {tunnel} | device | Total number of active IPSec Phase 2 tunnels |
snmp.device_prof_jnxIpSecSaMonActiveTime | s | per sa_index | Time this IPSec Security Association has been active |
snmp.device_prof_jnxIpSecSaMonLifeTime | s | per sa_index | Remaining lifetime of this IPSec Security Association |
snmp.device_prof_jnxIpSecSaMonState | {status} | per sa_index | Status of this IPSec Security Association |
snmp.device_prof_jnxIpSecTunMonDecryptFails | {failure}/s | per ipsec_tunnel_index | Number of decryption failures on this tunnel |
snmp.device_prof_jnxIpSecTunMonDroppedPkts | {drop}/s | per ipsec_tunnel_index | Total number of packets dropped on this IPSec Phase 2 tunnel |
snmp.device_prof_jnxIpSecTunMonEspAuthFails | {failure}/s | per ipsec_tunnel_index | Number of ESP authentication failures on this tunnel |
snmp.device_prof_jnxIpSecTunMonInDecryptedBytes | By/s | per ipsec_tunnel_index | Number of decrypted bytes received on this IPSec Phase 2 tunnel |
snmp.device_prof_jnxIpSecTunMonInDecryptedPkts | {packet}/s | per ipsec_tunnel_index | Number of decrypted packets received on this IPSec Phase 2 tunnel |
snmp.device_prof_jnxIpSecTunMonOutEncryptedBytes | By/s | per ipsec_tunnel_index | Number of encrypted bytes sent on this IPSec Phase 2 tunnel |
snmp.device_prof_jnxIpSecTunMonOutEncryptedPkts | {packet}/s | per ipsec_tunnel_index | Number of encrypted packets sent on this IPSec Phase 2 tunnel |
snmp.device_prof_jnxIpSecTunMonReplayDropPkts | {drop}/s | per ipsec_tunnel_index | Number of packets dropped due to anti-replay check failure |
System / Activity
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_hrSystemNumUsers | {session} | device | The number of user sessions for which this host is storing state information. A session is a collection of processes requiring a s… |
snmp.device_prof_hrSystemProcesses | {process} | device | The number of process contexts currently loaded or running on this system. |
System / CPU
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_cpu_usage | % | per cpu_index | The current CPU utilization |
System / Uptime
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_systemUptime | s | device | Time since the system was last rebooted or powered on. |
Uncategorized
| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
snmp.device_prof_hrStorageSize | By | per storage_index, rm:storage_type, rm:storage_alloc_unit | |
snmp.device_prof_hrStorageUsed | By | per storage_index, rm:storage_type, rm:storage_alloc_unit | |
snmp.device_prof_lldpStatsRemTablesAgeouts | — | device | |
snmp.device_prof_lldpStatsRemTablesDeletes | — | device | |
snmp.device_prof_lldpStatsRemTablesDrops | — | device | |
snmp.device_prof_lldpStatsRemTablesInserts | — | device | |
snmp.device_prof_lldpStatsRemTablesLastChangeTime | — | device | |
snmp.device_prof_lldpStatsRxPortAgeoutsTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesDiscardedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesErrors | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortFramesTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortTLVsDiscardedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsRxPortTLVsUnrecognizedTotal | — | per lldp_loc_port_num | |
snmp.device_prof_lldpStatsTxPortFramesTotal | — | per lldp_loc_port_num |
Do you have any feedback for this page? If so, you can open a new issue on our netdata/learn repository.