-checkpoint-gaia
Vendor: checkpoint
OS: gaia
Description:
indeni will alert when a virtual system’s CPU utilization is too high.
Remediation Steps:
Determine the cause for the high CPU usage of the listed cores. This may indicate a need for more cores needs to be added.\nReview the following article for further information on high CPU utilization on Check Point firewalls. https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98348
How does this work?
Indeni issues a combination of Linux and Checkpoint commands to discover the processes and threads associated with a given VS, and then adds up the CPU usage, per CPU core, for each VS. Indeni reports both the average and per core usage, and alerts the user if usage is above a certain threshold.
Why is this important?
High CPU usage could cause traffic to be dropped and may result in notable performance issues.
Without Indeni how would you find this?
An administrator could log in and manually issue the commands and add up the various results to check CPU usage.
chkp-gaia-vs-cpu-vsx
name: chkp-gaia-vs-cpu-vsx
description: Records the CPU usage for virtual systems
type: monitoring
monitoring_interval: 2 minutes
includes_resource_data: true
requires:
vendor: checkpoint
os.name: gaia
vsx: 'true'
role-firewall: 'true'
comments:
vs-cpu-usage:
why: |
High CPU usage could cause traffic to be dropped and may result in notable performance issues.
how: |
Indeni issues a combination of Linux and Checkpoint commands to discover the processes and threads
associated with a given VS, and then adds up the CPU usage, per CPU core, for each VS. Indeni reports both
the average and per core usage, and alerts the user if usage is above a certain threshold.
can-with-snmp: false
can-with-syslog: false
live-config-only-vs-cpu-usage:
why: |
To check the average cpu usage all the VS and per core utilization per VS
how: |
By using a combination of Linux and Checkpoint commands to discover the processes and threads associated
with a given VS, and then adds up the CPU usage, per CPU core, for each VS. Indeni reports both the average
and per core usage, and alerts the user if usage is above a certain threshold.
can-with-snmp: false
can-with-syslog: false
steps:
- run:
type: SSH
file: vs-cpu-vsx.remote.1.bash
parse:
type: AWK
file: vs-cpu-vsx.parser.1.awk
check_point_vs_cpu
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/sync_core_rules/checkpoint/check_point_vs_cpu.scala