Aggressive Aging enabled-checkpoint-all

Aggressive Aging enabled-checkpoint-all
0

Aggressive Aging enabled-checkpoint-all

Vendor: checkpoint

OS: all

Description:
Aggressive Aging turning on means the firewall is under an extreme load. If this happens, indeni will alert.

Remediation Steps:
Run “fw ctl pstat” for more information. Determine what may be causing the excessive load on the firewall.

chkp-fw-ctl-pstat-vsx

name: chkp-fw-ctl-pstat-vsx
description: Run "fw ctl pstat" on all VS's in a VSX environment.
type: monitoring
monitoring_interval: 4 minutes
requires:
    vendor: checkpoint
    vsx: 'true'
    role-firewall: 'true'
comments:
    kernel-memory-usage:
        skip-documentation: true
    chkp-agressive-aging:
        skip-documentation: true
    virtual-memory-usage:
        skip-documentation: true
steps:
-   run:
        type: SSH
        file: fw-ctl-pstat-vsx.remote.1.bash
    parse:
        type: AWK
        file: fw-ctl-pstat-vsx.parser.1.awk

check_point_aggressive_aging_novsx

// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead.

package com.indeni.server.rules.library.templatebased.checkpoint

import com.indeni.ruleengine.expressions.conditions.{Equals => RuleEquals, Not => RuleNot, Or => RuleOr}
import com.indeni.server.common.data.conditions.{Equals => DataEquals, Not => DataNot}
import com.indeni.server.rules.RuleContext
import com.indeni.server.rules.library.templates.StateDownTemplateRule

/**
  *
  */
case class check_point_aggressive_aging_novsx() extends StateDownTemplateRule(
  ruleName = "check_point_aggressive_aging_novsx",
  ruleFriendlyName = "Check Point Firewalls (Non-VSX): Aggressive Aging enabled",
  ruleDescription = "Aggressive Aging turning on means the firewall is under an extreme load. If this happens, indeni will alert.",
  metricName = "chkp-agressive-aging",
  alertIfDown = false,
  alertDescription = "Aggressive Aging has started operating on this device.\n\nThis alert was added per the request of <a target=\"_blank\" href=\"https://se.linkedin.com/in/johnathanbrowall\">Johnathan Browall Nordstrom</a>.",
  baseRemediationText = "Run \"fw ctl pstat\" for more information. Determine what may be causing the excessive load on the firewall.",
  metaCondition = !DataEquals("vsx", "true"))()