License usage limit approaching-checkpoint-all

License usage limit approaching-checkpoint-all
0

License usage limit approaching-checkpoint-all

Vendor: checkpoint

OS: all

Description:
Some licenses are limited to a certain number of elements (such as maximum users). If any of the licenses is nearing its limit, an alert will be issued.

Remediation Steps:
Consider purchasing additional licenses.

How does this work?
By using the Check Point built-in “vsx stat” command, the current usage and license limit is retrieved.

Why is this important?
Reaching the limit on number of virtual systems allowed, means no new virtual systems can be created.

Without Indeni how would you find this?
An administrator could login and manually run the command.

chkp-vsx-stat-monitoring

name: chkp-vsx-stat-monitoring
description: Collect VSX data
type: monitoring
monitoring_interval: 5 minutes
requires:
    vendor: checkpoint
    vsx: 'true'
    role-firewall: true
    asg:
        neq: 'true'

comments:
    license-elements-used:
        why: |
            Reaching the limit on number of virtual systems allowed, means no new virtual systems can be created.
        how: |
            By using the Check Point built-in "vsx stat" command, the current usage and license limit is retrieved.
        without-indeni: |
            An administrator could login and manually run the command.
        can-with-snmp: false
        can-with-syslog: false
        vendor-provided-management: |
            Listing the current number of installed virtual systems and the limit is available from the command line interface.
    license-elements-limit:
        skip-documentation: true
steps:
-   run:
        type: SSH
        command: ${nice-path} -n 15 fw vsx stat -v
    parse:
        type: AWK
        file: vsx-stat-monitoring.parser.1.awk

chkp-vsx-stat-monitoring

name: chkp-vsx-stat-monitoring
description: Collect VSX data
type: monitoring
monitoring_interval: 5 minutes
requires:
    vendor: checkpoint
    vsx: 'true'
    role-firewall: true
    asg:
        neq: 'true'

comments:
    license-elements-used:
        why: |
            Reaching the limit on number of virtual systems allowed, means no new virtual systems can be created.
        how: |
            By using the Check Point built-in "vsx stat" command, the current usage and license limit is retrieved.
        without-indeni: |
            An administrator could login and manually run the command.
        can-with-snmp: false
        can-with-syslog: false
        vendor-provided-management: |
            Listing the current number of installed virtual systems and the limit is available from the command line interface.
    license-elements-limit:
        skip-documentation: true
steps:
-   run:
        type: SSH
        command: ${nice-path} -n 15 fw vsx stat -v
    parse:
        type: AWK
        file: vsx-stat-monitoring.parser.1.awk

license_usage_limit

// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead.

package com.indeni.server.rules.library.templatebased.crossvendor

import com.indeni.server.rules.RuleContext
import com.indeni.server.rules.library.templates.NearingCapacityWithItemsTemplateRule
import com.indeni.server.rules.RemediationStepCondition

/**
  *
  */
case class license_usage_limit() extends NearingCapacityWithItemsTemplateRule(
  ruleName = "license_usage_limit",
  ruleFriendlyName = "All Devices: License usage limit approaching",
  ruleDescription = "Some licenses are limited to a certain number of elements (such as maximum users). If any of the licenses is nearing its limit, an alert will be issued.",
  usageMetricName = "license-elements-used",
  limitMetricName = "license-elements-limit",
  applicableMetricTag = "name",
  threshold = 80.0,
  minimumValueToAlert = 2.0, // We don't want to alert if the license capacity is 1 and we're using one item, this is a common occurence and isn't an issue
  alertDescription = "Some licenses are nearing their limit. Review the list below.",
  alertItemDescriptionFormat = "The number of elements in use is %.0f where the limit is %.0f.",
  baseRemediationText = "Consider purchasing additional licenses.",
  alertItemsHeader = "Affected Licenses")(
  RemediationStepCondition.VENDOR_CISCO ->
    """|
      |1. Run the "show license usage" NX-OS command to display information about the current license usage and the expire date.
      |2. Run the "show license" NX-OS command to view the installed licenses.
      |3. Run the "show license usage XXX" NX-OS command e.g." sh license usage ENHANCED_LAYER2_PKG" to display information about the activated features which utilize this license.
      |4. Consider activate the grace-period for the license.
      |5. Order new license from the CISCO.
      |6. For more information please review the next Cisco guide:
      |https://www.cisco.com/c/m/en_us/techdoc/dc/reference/cli/nxos/commands/fund/show-license-usage.html
    """.stripMargin
)