topic Re: How to configure Skyline Monitor for Security Group in Maestro in Hyperscale Firewall (Maestro)

How to configure Skyline Monitor for Security Group in Maestro

MarcuzShinz — Sat, 09 Nov 2024 03:11:59 GMT

Hi Team,

Have a nice day!

We are currently configuring Skyline for Security Group, however only MHO can push logs to Prometheus and Security Group cannot, does anyone have experience with this?

Re: How to configure Skyline Monitor for Security Group in Maestro

PhoneBoy — Mon, 11 Nov 2024 16:23:07 GMT

From what I can tell, this is supported, but requires configuring each node in the security group.
Is that correct @Elad_Chomsky ?

Re: How to configure Skyline Monitor for Security Group in Maestro

Tom_Kendrick — Mon, 11 Nov 2024 21:47:13 GMT

Hi,

You need to do the same on the security group - so follow https://support.checkpoint.com/results/sk/sk178566, as I'm sure you are to ensure the server is ready, the Dashboards are ready and the correct Jumbo is installed if needed. Then check https://sc1.checkpoint.com/documents/Appliances/Skyline/Content/Topics-AG/Configuration-on-Servers-Gaia-OS-Prometheus-with-Grafana.htm?tocpath=Skyline%20Configuration%20on%20Check%20Point%20Servers%20that%20run%20Gaia%20OS%20-%20Prometheus%20with%20Grafana%7C_____0#Skyline_Configuration_on_Check_Point_Servers_that_run_Gaia_OS_-_Prometheus_wi... (as an example).

In short, as mentioned, configuring on the MHO(s), sends info back from the MHO(s), you also need to configure on the Security Group too. Arguably, it's more important/beneficial to see the info from the group.

Tom

Re: How to configure Skyline Monitor for Security Group in Maestro

MarcuzShinz — Tue, 12 Nov 2024 02:49:27 GMT

Dear Tom,

We have configured according to the guide on all devices including MHO and SGMs, however only MHO can display data on Grafana. All SGMs only display information as below.

We tried reboot All SGMs, but this not resolve the issue.

Re: How to configure Skyline Monitor for Security Group in Maestro

Tom_Kendrick — Tue, 12 Nov 2024 06:29:35 GMT

Check you have the correct date/time/timezone on the group, and, check in the SP view. I would also set a 5 minute view, and ensure you are looking at the correct VS if necessary. You will see a better summary of the Maestro system in that view with per member views below it. There is also a log (tail -f /opt/CPotelcol/otelcol.log) to confirm data is being sent (system is connected).

Re: How to configure Skyline Monitor for Security Group in Maestro

MarcuzShinz — Tue, 12 Nov 2024 08:15:00 GMT

Configured the same all device, tried reboot, restart service, but SGMs not send data to Skyline. Has anyone had problems with this issue?

Re: How to configure Skyline Monitor for Security Group in Maestro

Elad_Chomsky — Tue, 12 Nov 2024 09:02:49 GMT

Hi,

As part of the latest Skyline version the correct behavior is to use the sklnctl command per member or use g_all and g_cp2blades to run it in parallel on all of the SGM's.

Re: How to configure Skyline Monitor for Security Group in Maestro

Elad_Chomsky — Tue, 12 Nov 2024 09:03:47 GMT

Hi @MarcuzShinz ,

Please open a support ticket to CheckPoint, so we can assist you directly to troubleshoot the issue.

Re: How to configure Skyline Monitor for Security Group in Maestro

Sven_Glock — Tue, 12 Nov 2024 14:46:30 GMT

Your security group is sending some data. Otherwise you would not see it in grafana. If there is no data within the selected timeframe the device disapears from grafanas hostname selector.
Moreover you can see an uptime, which means, that minimum the system uptime is beeing reported.

To better understand your problem it could be helpful to check the "explorer" in grafana using the syntax

{host_name="SecGroup-ch1-03"}

Re: How to configure Skyline Monitor for Security Group in Maestro

LaurentFr — Tue, 12 Nov 2024 16:01:07 GMT

I had the problem with vsx: I needed to specify a specific vs/context to see the info. What is surprising is that I need to do this specification for only one of the blades in the group

Re: How to configure Skyline Monitor for Security Group in Maestro

MarcuzShinz — Wed, 13 Nov 2024 03:25:16 GMT

As you see the picture above, I have connect security group to Skyline about 2 weeks, but data show as picture. We're not sure how Grafana will get the data field to display correctly.