Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Monitoring the System

 

The J-Web user interface lets you monitor a device’s physical characteristics, current processing status and alarms, and ongoing resource utilization to quickly assess the condition of a device at any time.

On SRX Series devices, the Dashboard lets you customize your view by selecting which informational panes to include on the Dashboard.

This section contains the following topics:

Monitoring System Properties for SRX Series Devices

Purpose

View system properties and customize the Dashboard.

When you start the J-Web user interface on an SRX Series device, the interface opens to the Dashboard. At the top and bottom of the page, the Dashboard displays an interactive representation of your device and a current log messages pane. By default, the center panes of the Dashboard display System Information, Resource Utilization, Security Resources, and System Alarms. However, you can customize the Dashboard panes to provide the best overview of your system.

Action

To control the content and appearance of the Dashboard:

  1. Click the Preferences icon at the top-right corner of the page. The Dashboard Preference dialog box appears.
  2. Select the types of information you want to display.
  3. (Optional) Specify the Automatically Refresh Data option to specify how often you want the data on the Dashboard to be refreshed.
  4. Click OK to save the configuration or Cancel to clear it.
  5. On the Dashboard, minimize, maximize, or drag the individual information panes to customize the display as needed.
Chassis ViewDisplays an image of the device chassis, including line cards, link states, errors, individual PICs, FPCs, fans, and power supplies.

You can use the Chassis View to link to corresponding configuration and monitoring pages for the device. To link to interface configuration pages for a selected port from the Chassis View, right-click the port in the device image and choose one of the following options:

  • Chassis Information—Links to the Chassis page.

  • Configure Port: Port-name—Links to the interfaces configuration page for the selected port.

  • Monitor Port: Port-name—Links to the monitor interfaces page for the selected port.

System IdentificationDisplays the device’s serial number, hostname, current software version, the BIOS version, the amount of time since the device was last booted, and the system’s time.
Note
  • To view the BIOS version under system identification, delete your browser cookies.

  • The hostname that appears in this pane is defined using the set system hostname command.

    On SRX Series devices, security logs were always timestamped using the UTC time zone by running set system time-zone utc and set security log utc-timestamp CLI commands. Now, time zone can be defined using the local time zone by running the set system time-zone time-zone command to specify the local time zone that the system should use when timestamping the security logs.

Resource UtilizationProvides a graphic representation of resource use. Each bar represents the percentage of CPU, memory, or storage utilization for the data plane or the control plane.
Security ResourcesProvides the maximum, configured, and active sessions; firewall and VPN policies; and IPsec VPNs. Click Sessions,FW/VPN Policies, or IPsec VPNs for detailed statistics about each category.
System AlarmsIndicates a missing rescue configuration or software license, where valid. System alarms are preset and cannot be modified.
File UsageDisplays the usage statistics for log files, temporary files, crash (core) files, and database files.
Login SessionsProvides a list of all currently logged in sessions. The display includes user credentials, login time, and idle time for each session.
Chassis StatusProvides a snapshot of the current physical condition of the device, including temperature and fan status.
Storage UsageDisplays the storage usage report in detail.
Threat ActivityProvides information about the most current threats received on the device.
Message LogsDisplays log messages and errors. You can clear old logs from the Message Logs pane by clicking the Clear button.

To control the information that is displayed in the Chassis View, use the following options:

  • To view an image of the front of the device, right-click the image and choose View Front.

  • To view an image of the back of the device, right-click the image and choose View Rear.

  • To enlarge or shrink the device view, use the Zoom bar.

  • To return the device image to its original position and size, click Reset.

Note

To use the Chassis View, a recent version of Adobe Flash that supports ActionScript and AJAX (Version 9) must be installed. Also note that the Chassis View appears by default on the Dashboard page. You can enable or disable it using options in the Dashboard Preference dialog box. Clearing cookies in Internet Explorer also causes the Chassis View appear on the Dashboard page.

To return to the Dashboard at any time, select Dashboard in the J-Web user interface.

Alternatively, you can view system properties by entering the following show commands in the CLI:

  • show system uptime

  • show system users

  • show system storage

  • show version

  • show chassis hardware

Monitoring Chassis Information

Purpose

View chassis properties, which include the status of hardware components on the device.

Action

To view these chassis properties, select Monitor>System View>Chassis Information in the J-Web user interface.

Caution

Do not install a combination of Physical Interface Modules (PIMs) in a single chassis that exceeds the maximum power and heat capacity of the chassis. If power management is enabled, PIMs that exceed the maximum power and heat limits remain offline when the chassis is powered on. To check PIM power and heat status, use the show chassis fpc and show chassis power-ratings commands.

The Chassis Information page displays the following types of information:

  • Routing Engine Details—This section of the page includes the following tabs:

    • Master—Master tab displays information about the routing engine, including the routing engine module, model number, version, part number, serial number, memory utilization, temperature, and start time. Additionally, this tab displays the CPU load averages for the last 1, 5, and 15 minutes.

    • Backup—If a backup routing engine is available, the Backup tab displays the routing engine module, model number, version, part number, serial number, memory utilization, temperature, and start time. Additionally, this tab displays the CPU load averages for the last 1, 5, and 15 minutes.

    Note

    If you need to contact customer support about the device chassis, supply them with the version and serial number displayed in the Routing Engine Details section of the page.

  • Power and Fan Tray Details—This Details section of the page includes the following tabs:

    • Power—Power tab displays the names of the device’s power supply units and their statuses.

    • Fan—Fan tab displays the names of the device’s fans and their speeds (normal or high). (The fan speeds are adjusted automatically according to the current temperature.)

  • Chassis Component Details—This section of the page includes the following tabs:

    • General—General tab displays the version number, part number, serial number, and description of the selected device component.

    • Temperature—Temperature tab displays the temperature of the selected device component (if applicable).

    • Resource—Resource tab displays the state, total CPU DRAM, and start time of the selected device component (if applicable).

      Note

      On some devices, you can have an FPC state as “offline.” You might want to put an FPC offline because of an error or if the FPC is not responding. You can put the FPC offline by using the CLI command request chassis fpc slot number offline.

    • Sub-Component—Sub-Component tab displays information about the device’s sub-components (if applicable). Details include the sub-component’s version, part number, serial number, and description.

To control which component details appear, select a hardware component from the Select component list.

Alternatively, you can view chassis details by entering the following show commands in the CLI configuration editor:

  • show chassis hardware

  • show chassis routing-engine

  • show chassis environment

  • show chassis redundant-power-supply

  • show redundant-power-supply status

System Health Management for SRX Series Devices

Purpose

Tracking the utilization of critical resources in the system ensures that all parameters are within normal limits and the system remains functional.

In the event of a malfunction caused by abnormal resource usage, the system health management feature provides the right diagnostic information to identify the source of the problem.

When the system health management action is configured by the user, the system takes appropriate monitoring, preventive, and recovery actions to ensure that the system is accessible. The system configuration might be updated based on the information collected by system health management feature to ensure that the system stays in the normal operating environment. For example, when a system runs out of memory, then the configuration associated with applications identified to be consuming memory resources can be updated to bring down the memory resource consumption.

Action

The system health management feature periodically monitors critical system resources against configurable thresholds. The resources that can be monitored include CPU usage, memory, storage, open-file-descriptor, process-count, and temperature. The system health management feature collects usage information for each resource at the configured interval and compares it against the three levels of thresholds: moderate, high, and critical. Based on the configurations, appropriate action is taken.

The intervals, thresholds, and action are associated with system health management and can be configured at both the resource level and the global level. Configurable and default levels are as follows:

  • Default configuration level— Default configuration is applied when system health monitoring is enabled, and neither a global nor a resource-specific configuration is present.

  • Global configuration level—Configuration that is applied to resources when no resource-specific configuration is available.

  • Resource-specific configuration level—Configuration that, if available, overrides both the global and the default configurations.

Per-resource configurations take precedence over the global configuration, and a global configuration takes precedence over the defaults.

When resource usage exceeds the configured thresholds, the system collects information that can be used to find the source of the increased usage and saves it in history for analysis and action.

When resource utilization exceeds the high threshold, a minor system alarm is generated, and the alarm LED lights yellow. When resource utilization exceeds the critical threshold, a major alarm is generated, and the alarm LED lights red.

An SNMP trap is also sent to the remote monitoring server (NMS) for all events that exceed the threshold.

To enable the system health monitor, use the set snmp health-monitor routing engine command. You can view system properties by using CLI show commands.