Pnote(s) down-checkpoint-all

Pnote(s) down-checkpoint-all

Pnote(s) down-checkpoint-all

Vendor: checkpoint

OS: all

ClusterXL has multiple problem notifications (pnotes) - if any of them fail an alert will be issued.

Remediation Steps:
Review the list of problematic elements and take appropriate action.


name: chkp-asg-cphaprob_list-vsx
description: Run "cphaprob list" to find pnotes in "problem" in vsx
type: monitoring
monitoring_interval: 1 minute
    vendor: checkpoint
    high-availability: 'true'
    vsx: true
    role-firewall: true
    asg: true
        neq: R80.20SP
        skip-documentation: true
-   run:
        type: SSH
        file: cphaprob-list-vsx.remote.1.bash
        type: AWK
        file: cphaprob-list-vsx.parser.1.awk


// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead.

package com.indeni.server.rules.library.templatebased.checkpoint

import com.indeni.server.rules.RuleContext
import com.indeni.server.rules.library.templates.StateDownTemplateRule
case class clusterxl_pnote_down_vsx() extends StateDownTemplateRule(
  ruleName = "clusterxl_pnote_down_vsx",
  ruleFriendlyName = "Check Point ClusterXL (VSX): Pnote(s) down",
  ruleDescription = "ClusterXL has multiple problem notifications (pnotes) - if any of them fail an alert will be issued.",
  metricName = "clusterxl-pnote-state",
  applicableMetricTag = "name",
  descriptionMetricTag = "",
  alertItemsHeader = "Problematic Elements",
  alertDescription = "Some VS's in this cluster member are down due to certain elements being in a \"problem state\".\n\nThis alert was added per the request of <a target=\"_blank\" href=\"\">Gal Vitenberg</a>.",
  baseRemediationText = "Review the list of problematic elements and take appropriate action.",
  itemSpecificDescription = Seq (
    "(?i).*FIB.*".r -> "The FIB device is responsible for supporting dynamic routing under ClusterXL. Review the firewall logs to ensure traffic with the FIBMGR service is flowing correctly.",

    // Catch-all
    ".*".r -> "Please consult with your technical support provider about this pnote."
  // Ignore interface active check, we alert about interface count separately
  itemsToIgnore = Set ("Interface Active Check".r))()