https://community.checkpoint.com/t5/Scripts/Cluster-triage-script/m-p/271598#M1509 <P>Hey guys,</P> <P>Here is simple cluster triage script. It would tell you exactly what to troubleshoot if cluster is in broken state. In my example, wont show much since cluster works, but it would if it shows anything other than active/standby.</P> <P>I know most of us know where to check logs and run below commands, but it still would give useful info:</P> <P>cphaprob state</P> <P>cphaprob -a if</P> <P>cphaprob -i list</P> <P>cphaprob -l list</P> <P>cphaprob syncstat</P> <P>Lab example:</P> <P><BR />[Expert@CP-FW-01:0]# cd /var/log/scripts/<BR />[Expert@CP-FW-01:0]# chmod 777 *<BR />[Expert@CP-FW-01:0]# dos2unix *<BR />dos2unix: converting file cp_cluster_triage.sh to Unix format ...<BR />[Expert@CP-FW-01:0]# ./cp_cluster_triage.sh<BR />============================================================<BR />Check Point ClusterXL triage (read-only)<BR />Host: CP-FW-01<BR />Time: 20260222_095956<BR />Log : /var/tmp/cluster_triage_CP-FW-01_20260222_095956.log<BR />VS : (none)<BR />============================================================<BR />NOTE: cphaprob is typically used in Expert mode.<BR />Log file: /var/tmp/cluster_triage_CP-FW-01_20260222_095956.log</P> <P>===== cphaprob state =====</P> <P>Cluster Mode: High Availability (Active Up) with IGMP Membership</P> <P>ID Unique Address Assigned Load State Name</P> <P>1 (local) 169.254.0.248 100% ACTIVE CP-FW-01<BR />2 169.254.0.247 0% STANDBY CP-FW-02</P> <P><BR />Active PNOTEs: None</P> <P>Last member state change event:<BR />Event Code: CLUS-114904<BR />State change: ACTIVE(!) -&gt; ACTIVE<BR />Reason for state change: Reason for ACTIVE! alert has been resolved<BR />Event time: Tue Feb 17 08:28:56 2026</P> <P>Cluster failover count:<BR />Failover counter: 0<BR />Time of counter reset: Tue Feb 17 08:27:16 2026 (reboot)</P> <P><BR />grep: Unmatched ( or \(</P> <P>Detected local normalized state: ACTIVE</P> <P>OK: Local member is ACTIVE (clean). No extra triage needed.<BR />[Expert@CP-FW-01:0]#</P> Sat, 14 Mar 2026 05:48:46 GMT the_rock 2026-03-14T05:48:46Z https://community.checkpoint.com/t5/Scripts/Cluster-triage-script/m-p/271598#M1509 1 Sat, 14 Mar 2026 05:48:46 GMT https://community.checkpoint.com/t5/Scripts/Cluster-triage-script/m-p/271598#M1509 the_rock 2026-03-14T05:48:46Z