Smart way to gauge log entries per second?

[SandiT]

Hi

We have an MSP who is charging us for MPS (messages per second)

I understand that they are probably periodically performing this command:

cpstat mg -f log_server                  [after SSHing to the box]

Is there a way to "grab" this off the box over time to get our own numbers?

Or should we other methods, like use the management server?

Export them to a syslog server and count them!?

Can this not be SNMP read off the box without SSH?

Basically look for ideas on how to automate, and get a better understanding of our rate.

Before moving on to understanding why we apparently have a high number.

Thanks!

[Timothy_Hall]

If you want to continuously monitor the log rate than SNMP/stattest is the way to do it, see here:

sk120341: How to monitor the Log Receive Rate on Management Server / Log Server R80 and above

Also this SK is great reading to get a sense of the logging/indexing capacity of the various Smart-1 appliances:

sk112797: Smart-1 R80.x Logging Capacity Performance Improvements

[Kaspars_Zibarts]

https://community.checkpoint.com/t5/Logging-and-Reporting/Log-rate-calculator-for-MDS-MLM/m-p/15188#...

That's for MDM/MLM but you can adapt it for regular SMS