INC_SC_SITE_LONG_DURATION_EXCEEDED_ CAPACITY
Focus
Focus
Prisma Access

INC_SC_SITE_LONG_DURATION_EXCEEDED_ CAPACITY

Table of Contents

INC_SC_SITE_LONG_DURATION_EXCEEDED_ CAPACITY

Learn about the INC_SC_SITE_LONG_DURATION_EXCEEDED_CAPACITY incident.

Synopsis

Site capacity exceeded 100% usage for 3 days in the last 5 days for site <site-name> <ingress | egress> traffic
Incident Code—INC_SC_SITE_LONG_DURATION_EXCEEDED_CAPACITY
Severity—Critical
For details about incident severity, see Incidents Distribution Over Time in Incidents and Alerts Overview.

Required License

Prisma Access

Details

Raise condition
Site capacity exceeded 100% usage for at least 3 of the last 5 days for at least 1 hour a day in the given direction.
Clear condition
Site capacity did not exceed 90% usage in the last 8 days for at least 1 hour a day in the given direction.

Correlated Alerts

AL_SC_SITE_LONG_DURATION_EXCEEDED_CAPACITY

Remediation

  1. Check for any of the following changes to the alerted sites. If you need assistance, contact your network administrators.
    • New system implementation.
    • Inflow of new users to the site.
    • Newly implemented data backups.
    • Configuration or network changes.
  2. Check that you have sized any new remote network site accordingly. For details, see How to Calculate Remote Network Bandwidth.
  3. For Panorama managed tenants: Use ACC logs to help you isolate which services are using the most bandwidth.
  4. If you expect additional traffic, consider adding more bandwidth.