Hello everyone,
I would like to ask about your experience with metrics for Skyline (Prometheus/Grafana) from Check Point. I am particularly interested in network metrics such as BGP, OSPF, static routing, BFD, etc. Ideally, it would be great to have all of these as telemetry data:
| BGP (Border Gateway Protocol) | bgp_peers_up | Number of BGP peers currently in the "Established" state. |
| | bgp_routes_received | Total number of routes received from all BGP peers. |
| | bgp_routes_advertised | Total number of routes advertised to all BGP peers. |
| | bgp_peer_state | State of individual BGP peers (e.g., Idle, Connect, Active, or Established). |
| | bgp_update_messages_received | Number of BGP update messages received. |
| | bgp_update_messages_sent | Number of BGP update messages sent. |
| | bgp_prefixes_received | Total number of prefixes received. |
| | bgp_last_flap_time | Time since the last BGP session flap occurred. |
| OSPF (Open Shortest Path First) | ospf_neighbors_up | Number of OSPF neighbors in the "Full" adjacency state. |
| | ospf_neighbors_total | Total number of configured OSPF neighbors. |
| | ospf_lsdb_entries | Total number of Link-State Database (LSDB) entries. |
| | ospf_routes | Total number of routes learned through OSPF. |
| | ospf_packets_sent | Number of OSPF packets sent. |
| | ospf_packets_received | Number of OSPF packets received. |
| | ospf_state_changes | Count of OSPF state changes (e.g., transitions between Init, 2-Way, Full). |
| | ospf_area_id_status | Health status of specific OSPF areas (e.g., Area 0). |
| BFD (Bidirectional Forwarding Detection) | bfd_sessions_up | Number of active BFD sessions. |
| | bfd_sessions_down | Number of BFD sessions currently down. |
| | bfd_packets_sent | Number of BFD control packets sent. |
| | bfd_packets_received | Number of BFD control packets received. |
| | bfd_detection_time | Time taken for a session to detect a fault. |
| Networking | network_connections_active | Counts the number of active connections. |
| | network_connections_rate | Tracks the rate of new connections per second. |
| | network_packets_sent | Tracks the number of packets sent. |
| | network_packets_received | Tracks the number of packets received. |
| | network_bytes_sent | Tracks the total bytes sent. |
| | network_bytes_received | Tracks the total bytes received. |
Skyline setup is pretty easy and works well with general metrics. However, I thought it would be possible to go a little deeper and collect more detailed data.
I'm curious: is there any limitation in the availability of metrics for Check Point (like basic data from cpview, on the other hand for example in cpview it is possible to see information about BGP, OSPF etc.), but I wasnt able to find information how to set up these metrics...
This is the official Skyline metrics repository: Skyline Metrics Repository which I used
According to some articles it seems possible to use Prometheus SNMP Exporter and do manual configurations like setting up SNMP exporter for BGP metrics and updating Prometheus configurations. However, I'm not sure if this is the right approach to achieve this and I would like to implement something in production with Check Point's thumb up.
Adam
