checkpoint opentelemetry and telegraf/influxdb

Luis_Miguel_Mig — Fri, 04 Apr 2025 13:24:20 GMT

I have telelegraf influxdb grafana (TIG) stack that allows me to monitor checkpoint asset metrics using classic SNMP and API queries.

Now I would like to use checkpoint open telemetry. As far as I understand there is no specific documentation for telegraf/influxdb and checkpoint telemetry but because both checkpoint and telegraf support opentelemetry I guess it may no be difficult to make it work. I was wondering if someone as any insight on it.

First of all I have seen how checkpoint supports prometheus, splunk, dynatrace, victoriametrics, datadog and coralogix

https://sc1.checkpoint.com/documents/Appliances/Skyline/Content/Topics-AG/Configuration-on-Servers-Gaia-OS-Other-Tools.htm?tocpath=Skyline%20Configuration%20on%20Check%20Point%20Servers%20that%20run%20Gaia%20OS%20-%20Other%20Monitoring%20Tools%7C_____0#Skyline_Configuration_on_Check_Point_Servers_that_run_Gaia_OS_-_Other_Monitor...

Secondly the skyline architecture is based on opentelemetry

https://support.checkpoint.com/results/sk/sk178566

I see two integrations options but I reckon the second one may be a more suitable interface.

- cp agent-> telegraf collector
- cp collector -> telegraf collector

As far as I understand the trick is to configure the cp collector json payload with right parameters.
I see there a few exporter type options like prometheus-remote-write, otlp, otlphttp...

Telegraf has also an input plugin that is basically an opentelemetry collector and it supports prometheus metrics schema.

https://github.com/influxdata/telegraf/blob/master/plugins/outputs/opentelemetry/README.md

I will try it next week but I was wondering if someone has any experience on it

Re: checkpoint opentelemetry and telegraf/influxdb

Henrik_Noerr1 — Sat, 05 Apr 2025 18:58:41 GMT

Hey,

We are also using a TIG stack, with a payload like:

[Expert@test-vsx-01:0]# cat /home/_nonlocl/payload.json

[Expert@test-vsx-01:0]# cat /home/_nonlocl/payload.json { "enabled": true, "export-targets": {"add": [ { "enabled": true, "type": "prometheus-remote-write", "url": "http://<ip>:9090/api/v1/write" } ]} } [Expert@test-vsx-01:0]#

root@telegraf:/etc/telegraf/telegraf.d# cat otel.conf [[inputs.http_listener_v2]] ## Address and port to host HTTP listener on service_address = ":9090" ## Paths to listen to. paths = ["/api/v1/write"] ## Data format to consume. data_format = "prometheusremotewrite" # [inputs.http_listener_v2.tags] # telemetry = "skyline"

Regards,

Henrik

topic checkpoint opentelemetry and telegraf/influxdb in OpenTelemetry/Skyline

checkpoint opentelemetry and telegraf/influxdb

Re: checkpoint opentelemetry and telegraf/influxdb