How to trigger of checkpoint FW state in observium?
We're running observium pro stable release 17.10.8930 and are monitoring several checkpoint firewalls with it. I'm trying to figure out how to generate an alert when the firewalls fail over or when a state change occurs.
I see that it's being polled as it's displayed for the device header. as you can see attached.
This comes from checkpoint from the 1.3.6.1.4.1.2620.1.5.6.0 OID: SNMPv2-SMI::enterprises.2620.1.5.6.0 = STRING: "active"
But I don't see any method to select that as an entity type?
Anyone have any pointers?
This is probably much better done as a syslog alert.
Since neither "active" nor "standby" is obviously an error, it's sometimes difficult to get the output you want from this type of status.
In any case, the way to do what you think you want is to add support for that OID as a status, but then it's difficult to use since you can't really tell Observium that active is bad... :D
adam.
Adam Armstrong CEO & Lead Architect Observium Limited On 2017-11-22 11:05:14, Steve Costaras stevecs@chaven.com wrote:
We're running observium pro stable release 17.10.8930 and are monitoring several checkpoint firewalls with it. I'm trying to figure out how to generate an alert when the firewalls fail over or when a state change occurs.
I see that it's being polled as it's displayed for the device header. as you can see attached.
This comes from checkpoint from the 1.3.6.1.4.1.2620.1.5.6.0 OID: SNMPv2-SMI::enterprises.2620.1.5.6.0 = STRING: "active"
But I don't see any method to select that as an entity type?
Anyone have any pointers?
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
I've attached a screenshot of the alert configuration I use to monitor HA status on Check Point firewalls.
-----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of Steve Costaras Sent: Wednesday, November 22, 2017 3:56 AM To: Observium observium@observium.org Subject: [Observium] How to trigger of checkpoint FW state in observium?
We're running observium pro stable release 17.10.8930 and are monitoring several checkpoint firewalls with it. I'm trying to figure out how to generate an alert when the firewalls fail over or when a state change occurs.
I see that it's being polled as it's displayed for the device header. as you can see attached.
This comes from checkpoint from the 1.3.6.1.4.1.2620.1.5.6.0 OID: SNMPv2-SMI::enterprises.2620.1.5.6.0 = STRING: "active"
But I don't see any method to select that as an entity type?
Anyone have any pointers?
participants (3)
-
Adam Armstrong -
Jeff Williams -
Steve Costaras