topic Re: hcp vs. healthcheck.sh? in General Topics

hcp vs. healthcheck.sh?

Timothy_Hall — Thu, 29 Dec 2022 00:55:59 GMT

Forgive me if this seems like a silly question but is HealthCheck Point (sk171436: HealthCheck Point (HCP) Release Updates) the permanent replacement for healthcheck.sh (sk121447: How to perform an automated health check of a Gaia based system)?

Is there any reason to run healthcheck.sh over hcp assuming you have the latest version of hcp? Does healthcheck.sh give you anything that hcp does not? It doesn't appear that way, and it is kind of implied in the SKs that HealthCheck Point should be used going forward but it is not explicitly stated anywhere that I can find.

Re: hcp vs. healthcheck.sh?

Chris_Atkinson — Thu, 29 Dec 2022 02:18:11 GMT

It's certainly my understanding that HCP is the path forward here.

Comparatively the healthcheck.sh script hasn't seen updates in a while. If there are gaps please share them and we will flag them with the relevant owner.

Re: hcp vs. healthcheck.sh?

RamGuy239 — Thu, 29 Dec 2022 21:58:28 GMT

I tend to run both just to be able to compare the results when I need to check the health status of a Check Point installation. But as you can see from sk121447, it mentions that for checking health on an R81.20 installation, you must use HCP, which points towards the healthcheck.sh not getting updated any time soon, and it will most likely never support R81.20 at all.

Re: hcp vs. healthcheck.sh?

the_rock — Fri, 30 Dec 2022 02:22:08 GMT

Personally, I find healthcheck.sh way more useful with way more accurate results.

Re: hcp vs. healthcheck.sh?

Chris_Atkinson — Fri, 30 Dec 2022 10:01:53 GMT

Do you have some current examples?

Comparatively I know the healthcheck.sh raid check is one example that raised eyebrows....

Re: hcp vs. healthcheck.sh?

S_E_ — Fri, 30 Dec 2022 12:23:16 GMT

Personally, I find healthcheck.sh much more easier. One single script with 2 results (txt / html)

...

Even knowing healtcheck.sh sometimes throws an error : SND/FW Core Distribution |Runtime error (func=(main), adr=3): Divide by zero

HCP means a lot of overhead im terms of installation and handling with 'special' commands (autoupdatercli instead of CPUSE)

And the copying files / extracting and so on....

Regards

Re: hcp vs. healthcheck.sh?

the_rock — Fri, 30 Dec 2022 12:27:19 GMT

I can tell you every time I ran HCP, even TAC could not get any results either, nor could they open html file produced. Never had such an issue with healthcheck.sh script.

Re: hcp vs. healthcheck.sh?

the_rock — Fri, 30 Dec 2022 12:27:39 GMT

Agree 100%.

Re: hcp vs. healthcheck.sh?

Danny — Fri, 30 Dec 2022 14:04:50 GMT

healthcheck.sh is discontinued by Check Point as noted in sk121447.

It's author told me:

@Nathan_Davieau wrote:

I do intend to have HCP replace the healthcheck script.
I am glad that so many people liked the script but I just don’t have the free time to develop it like I used to.

I had the idea to continue it as a community edition but I don't have the time neither.

Whatever you miss in HCP, just let them know as comment in sk171436.

Re: hcp vs. healthcheck.sh?

the_rock — Fri, 30 Dec 2022 14:16:31 GMT

Lets hope 2023 brings even better tool : - ). @Danny , since you are the scripting MASTER, I think you will end up making something that works 100%, like you did many other times.

Re: hcp vs. healthcheck.sh?

Ilya_Yusupov — Sun, 01 Jan 2023 06:08:47 GMT

Hi @the_rock,

Can you give some more concrete cases where you had an issue with HCP? asking as i'm a fan of HCP tool, i used it for many cases i had from the field and found it very useful.

Moreover starting R81.20 you may review the report thorough WebUI by running the tool and review it under https://<gwip>/hcp.

i will be glad to hear feedback's on HCP tool so i can take it with the owners and see how we can enhance it more.

Thanks,

Ilya

Re: hcp vs. healthcheck.sh?

the_rock — Sun, 01 Jan 2023 13:53:50 GMT

Well, as I mentioned, even when working with TAC, we could never open html page generated to see the results. All we would do is run hcp -r all command, thats it.

I will test R81.20 in the lab this week and report.

Re: hcp vs. healthcheck.sh?

Ilya_Yusupov — Sun, 01 Jan 2023 14:11:34 GMT

If someone has such issue, i will more than happy to see it and try to assist, i never encountered with such case where i was not able to open html report.

Thanks,

Ilya

Re: hcp vs. healthcheck.sh?

the_rock — Sun, 01 Jan 2023 14:14:36 GMT

Not sure man, sorry. I will definitely try out R81.20 and see if I get better luck.

Re: hcp vs. healthcheck.sh?

Daniel_Szydelko — Mon, 02 Jan 2023 15:09:11 GMT

Hi Ilya,

It will be useful to see cli commands used for particular tests.

Daniel.

Re: hcp vs. healthcheck.sh?

the_rock — Tue, 03 Jan 2023 00:13:31 GMT

WOW, Im super impressed with this @Ilya_Yusupov . Love the new HCP in R81.20...wish it was like this since the beginning. I attached the snippet for anyone curious what it looks like once you run hcp -r all in shs.

After finished, I opened https://172.16.10.205:4434/hcp and below is what I got (very very cool indeed).

Andy

Re: hcp vs. healthcheck.sh?

G_W_Albrecht — Tue, 03 Jan 2023 13:39:46 GMT

The tool is a rpm executable 8) Similar thing with CPM Doc run_cpmdoc.sh: Mostly code, executed by a short head script.

Re: hcp vs. healthcheck.sh?

Václav_Brožík — Tue, 10 Jan 2023 14:50:54 GMT

In the sk121447 I am not able to find any mention of healthcheck.sh being discontinued. Could you please point me to the statement?

For me it is difficult to try to trust tools like hcp or healthcheck when they do not show the exact commands used to obtain the information. Without that I cannot be sure what remains to be checked manually. I can use them just for a quick basic overview.

@Chris_Atkinson Recently I was solving problem with SIC certificates. HCP showed no problems on a management server and a gateway despite the fact that:

* The management (secondary) had the ICA root certificate expired.

* The gateway had its SIC certificate expired and the automatic renewal was failing repeatedly.

Re: hcp vs. healthcheck.sh?

Danny — Tue, 10 Jan 2023 15:03:02 GMT

Re: hcp vs. healthcheck.sh?

Chris_Atkinson — Tue, 10 Jan 2023 15:52:04 GMT

To clarify are you suggesting this is a difference with healthcheck.sh or an improvement you would like to see added for HCP?

Depending on the versions involved there has been improved alerting added in the console for such scenarios moreover this is also something PRO support identifies if s customer has that entitlement licensed/active.