<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: 64k metric &amp;quot;system_network_interface_io_receive_rate&amp;quot; different than asg perf or cpvie in OpenTelemetry/Skyline</title>
    <link>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/213490#M361</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;we had a similar issue in our VSX environment. I've investigated a bit and found out, that if we just use the default query which includes all VS the VS ID 0 delivers the same data as some VS. So we created a query to exclude data from VS0 like so:&lt;BR /&gt;&lt;BR /&gt;sum by (interface) (system_network_interface_io_receive_rate{environment=~"$d_environment", service_namespace!="vs_id_0", interface!~"TOTAL|lo"})&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This solved our issues and allowed for correct graphs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Cheers,&lt;/P&gt;&lt;P&gt;Sascha&lt;/P&gt;</description>
    <pubDate>Tue, 07 May 2024 13:00:22 GMT</pubDate>
    <dc:creator>skeutgen</dc:creator>
    <dc:date>2024-05-07T13:00:22Z</dc:date>
    <item>
      <title>64k metric "system_network_interface_io_receive_rate" different than asg perf or cpview</title>
      <link>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/204208#M303</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;I think I am using a dashboard which was provided here in the community by&amp;nbsp;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456"&gt;@Kaspars_Zibarts&lt;/a&gt;&amp;nbsp; or from the sk.&lt;/P&gt;
&lt;P&gt;I am not sure if I modified that query or not however it looks like this:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;system_network_interface_io_receive_rate&lt;/SPAN&gt;&lt;SPAN&gt;{&lt;/SPAN&gt;&lt;SPAN&gt;environment&lt;/SPAN&gt;&lt;SPAN&gt;=~&lt;/SPAN&gt;&lt;SPAN&gt;"Default"&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN&gt;host_name&lt;/SPAN&gt;&lt;SPAN&gt;=~&lt;/SPAN&gt;&lt;SPAN&gt;"l999gnfw0101q-ch01-01"&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN&gt;interface&lt;/SPAN&gt;&lt;SPAN&gt;=&lt;/SPAN&gt;&lt;SPAN&gt;"TOTAL"&lt;/SPAN&gt;&lt;SPAN&gt;}&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;The result I get from this query does not fit the results from:&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;asg perf -v -p and blade 1_01&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;cpview on blade 1_01&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;The query does not represent ther overall chassis thorughput, too.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;Unfortunately it s hard to compare the results because asg perf and cpview are updating the values more frequently than skyline sends data to Prometheus (15s).&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;I think "system_network_interface_io_receive_rate" is roughly 2x the throughput on the SGM shown by cpview or asg perf.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;I use the same query for 16200 or 26000 ClusterXL environments and there it looks like the values match between skyline and cpview.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;PS:&lt;BR /&gt;In addition I receive metrics with the metrics name "system_network_interface_rx_throughput_bs". The represent exactly the same value but different name. The documentation does list this metric.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;&lt;A href="https://sc1.checkpoint.com/documents/Appliances/Skyline/Content/Topics-Skyline-Metrics/Introduction.htm" target="_blank"&gt;Introduction (checkpoint.com)&lt;/A&gt;&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;Any observations from your site?&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;/DIV&gt;</description>
      <pubDate>Thu, 25 Jan 2024 23:19:42 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/204208#M303</guid>
      <dc:creator>Alexander_Wilke</dc:creator>
      <dc:date>2024-01-25T23:19:42Z</dc:date>
    </item>
    <item>
      <title>Re: 64k metric "system_network_interface_io_receive_rate" different than asg perf or cpvie</title>
      <link>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/213490#M361</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;we had a similar issue in our VSX environment. I've investigated a bit and found out, that if we just use the default query which includes all VS the VS ID 0 delivers the same data as some VS. So we created a query to exclude data from VS0 like so:&lt;BR /&gt;&lt;BR /&gt;sum by (interface) (system_network_interface_io_receive_rate{environment=~"$d_environment", service_namespace!="vs_id_0", interface!~"TOTAL|lo"})&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This solved our issues and allowed for correct graphs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Cheers,&lt;/P&gt;&lt;P&gt;Sascha&lt;/P&gt;</description>
      <pubDate>Tue, 07 May 2024 13:00:22 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/213490#M361</guid>
      <dc:creator>skeutgen</dc:creator>
      <dc:date>2024-05-07T13:00:22Z</dc:date>
    </item>
    <item>
      <title>Re: 64k metric "system_network_interface_io_receive_rate" different than asg perf or cpvie</title>
      <link>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/213604#M362</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;I think I found the root cause for non-VSX environments. The "TOTAL" seems to include BPEth0 and BPEth1 on scalable plattforms.&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;For non Maestro/64k I use this alert rule to alert if throughput per SGM/device is higher than 6Gbit/s:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;ceil&lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp; &lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;SPAN&gt;avg_over_time&lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;SPAN&gt;system_network_interface_io_transmit_rate&lt;/SPAN&gt;&lt;SPAN&gt;{&lt;/SPAN&gt;&lt;SPAN&gt;host_name&lt;/SPAN&gt;&lt;SPAN&gt;!~&lt;/SPAN&gt;&lt;SPAN&gt;".*64k.*|.*maestro.*"&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN&gt;interface&lt;/SPAN&gt;&lt;SPAN&gt;=&lt;/SPAN&gt;&lt;SPAN&gt;"TOTAL"&lt;/SPAN&gt;&lt;SPAN&gt;}[&lt;/SPAN&gt;&lt;SPAN&gt;15m&lt;/SPAN&gt;&lt;SPAN&gt;])&lt;/SPAN&gt; &lt;SPAN&gt;/&lt;/SPAN&gt; &lt;SPAN&gt;1024&lt;/SPAN&gt; &lt;SPAN&gt;/&lt;/SPAN&gt; &lt;SPAN&gt;1024&lt;/SPAN&gt; &lt;SPAN&gt;)&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;/SPAN&gt;&lt;SPAN&gt;&amp;gt;=&lt;/SPAN&gt; &lt;SPAN&gt;6000&lt;/SPAN&gt;&lt;SPAN&gt;)&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;For maestro/64k devices we use only the BPEthX interfaces.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;
&lt;DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;ceil&lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &lt;/SPAN&gt;&lt;SPAN&gt;sum&lt;/SPAN&gt; &lt;SPAN&gt;by &lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;SPAN&gt;host_name&lt;/SPAN&gt;&lt;SPAN&gt;)&lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;SPAN&gt;avg_over_time&lt;/SPAN&gt;&lt;SPAN&gt;(&lt;/SPAN&gt;&lt;SPAN&gt;system_network_interface_io_transmit_rate&lt;/SPAN&gt;&lt;SPAN&gt;{&lt;/SPAN&gt;&lt;SPAN&gt;host_name&lt;/SPAN&gt;&lt;SPAN&gt;=~&lt;/SPAN&gt;&lt;SPAN&gt;".*64k.*|.*maestro.*"&lt;/SPAN&gt;&lt;SPAN&gt;, &lt;/SPAN&gt;&lt;SPAN&gt;interface&lt;/SPAN&gt;&lt;SPAN&gt;=~&lt;/SPAN&gt;&lt;SPAN&gt;"BPEth.*"&lt;/SPAN&gt;&lt;SPAN&gt;}[&lt;/SPAN&gt;&lt;SPAN&gt;15m&lt;/SPAN&gt;&lt;SPAN&gt;]))&lt;/SPAN&gt; &lt;SPAN&gt;/&lt;/SPAN&gt; &lt;SPAN&gt;1024&lt;/SPAN&gt; &lt;SPAN&gt;/&lt;/SPAN&gt; &lt;SPAN&gt;1024&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp; &lt;/SPAN&gt;&lt;SPAN&gt;)&lt;/SPAN&gt; &lt;SPAN&gt;&amp;gt;&lt;/SPAN&gt; &lt;SPAN&gt;6000&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;</description>
      <pubDate>Wed, 08 May 2024 09:31:22 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/OpenTelemetry-Skyline/64k-metric-quot-system-network-interface-io-receive-rate-quot/m-p/213604#M362</guid>
      <dc:creator>Alexander_Wilke</dc:creator>
      <dc:date>2024-05-08T09:31:22Z</dc:date>
    </item>
  </channel>
</rss>

