R80.20 Mgmt API issue

[Basilio_Alcant1]

We need help with this issue happening in R80.20 , we see the API service stopping randomly and at that point we need to manually restart the service but of course we are trying to find out what is causing it to stop running randomly , this is very annoying.

Below is the output of the API status when the issue happens:

API Settings:
---------------------
Accessibility: Require all granted
Automatic Start: Enabled

Processes:

Name State PID More Information
-------------------------------------------------
API Stopped
CPM Started 4929 Check Point Security Management Server is running and ready
FWM Started 2192
APACHE Started 4180

Port Details:
-------------------
JETTY Internal Port: 50276
APACHE Gaia Port: 4434 (a non-default port)
When running mgmt_cli commands add '--port 4434'
When using web-services, add port 4434 to the URL

--------------------------------------------
Overall API Status: The API Server Is Not Running!
--------------------------------------------

Notes:
------------
To collect troubleshooting data, please run 'api status -s <comment>'

[Expert@cglscc4a:0]# api status

API Settings:
---------------------
Accessibility: Require all granted
Automatic Start: Enabled

Processes:

Name State PID More Information
-------------------------------------------------
API Stopped
CPM Started 4929 Check Point Security Management Server is running and ready
FWM Started 2192
APACHE Started 4180

Port Details:
-------------------
JETTY Internal Port: 50276
APACHE Gaia Port: 4434 (a non-default port)
When running mgmt_cli commands add '--port 4434'
When using web-services, add port 4434 to the URL

--------------------------------------------
Overall API Status: The API Server Is Not Running!
--------------------------------------------

Notes:
------------
To collect troubleshooting data, please run 'api status -s <comment>'

[Dominik_Hofman1]

Hi,

it is my first post here  🙂

so we had the same issue.

take a look at this sk119553

it helped for us starting on Version R80 till R80.20

Brgds

Dominik

[Basilio_Alcant1]

I m getting "command not found" when trying to run the commands suggested on sk119553 ... Am i doing something wrong??

[Expert@cglscc4a:0]# $ echo "_cpprof_add NGM_WEB_API_MAX_MEMORY 4096 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
bash: $: command not found

[Timothy_Hall]

Do not include the $ symbol at the start.

[Basilio_Alcant1]

Thanks Tim, that did it!

[Timothy_Hall · Accepted solution]

Is the API interface getting pounded by lots of simultaneous operations?  If so you may need to increase the amount of memory allocated to the API daemon, see here: sk119553: Security Management API server crashes under heavy load

Run api status -s blah then unzip the archive it produces.  Poke around in the various log files that were part of the archive, you will probably find some interesting log entries related to the crash.  Or just send the archive to TAC for inspection.

[John_Fulater]

I agree with Tim.  Even though the SK stats that it was fixed int R80.20, I have had to increase the API memory on all our management environments (MDS and SDS).

[PhoneBoy]

How much RAM and CPU do you have allocated for your management?

[John_Fulater]

I have 12 cores and 64gig ram - It is running on VMware.

[Raj_Khatri]

We are experiencing the same issue as well after going to R80.20 where the API service keeps stopping.  We had the 2 commands added when we were running R80.10 which did the trick.  I just applied on R80.20 although it says it was fixed, so fingers crossed....  will continue to monitor.

#echo "_cpprof_add NGM_WEB_API_MAX_MEMORY 4096 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
#echo "_cpprof_add NGM_WEB_API_JRE_64 1 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
#api restart

[Raj_Khatri]

Appears the issue is resolved and API service is remaining up.  Received confirmation from TAC that the fix is built into R80.20 but the commands still need to be added.  Previously, a hotfix for R80.10 was required in order for the commands to work.

[Goli_Kohsari]

After adding the fix sk119553 on top of HF mgmt_wrapper_HOTFIX_R80_20_JHF_4
7_GEN_879_MAIN_GA_FULL.tgz on top of R80.20 HF 87 we have Overall API Status: Waiting for CPM to start on mds and cma level have a TAC opened waiting for R&D to do further investigation why CPM is showing Waiting even that is up and no issue with Gui connectivity but API seems to be stable

[Goli_Kohsari]

CPM issue been resolve by creating the missing file cpm.pid cd /opt/CPsuite-R80.20/fw1/tmp echo "CPM" > cpm.pid

[BalasNave]

Hello , I try to start API service ( status stopped) 

I got message "warning waiting for file mgmt_api_profile_settings.xml to be created " 

And nothing happen , fresh Gaya install , what should I do ? 

Thanks by head

[StaxNet]

i got the same Issue !! I'm stuck at my project
Please any help ?

[_Val_]

Please post output of "api status" command.