Cluster triage script

[the_rock]

Hey guys,

Here is simple cluster triage script. It would tell you exactly what to troubleshoot if cluster is in broken state. In my example, wont show much since cluster works, but it would if it shows anything other than active/standby.

I know most of us know where to check logs and run below commands, but it still would give useful info:

cphaprob state

cphaprob -a if

cphaprob -i list

cphaprob -l list

cphaprob syncstat

Lab example:

[Expert@CP-FW-01:0]# cd /var/log/scripts/
[Expert@CP-FW-01:0]# chmod 777 *
[Expert@CP-FW-01:0]# dos2unix *
dos2unix: converting file cp_cluster_triage.sh to Unix format ...
[Expert@CP-FW-01:0]# ./cp_cluster_triage.sh
============================================================
Check Point ClusterXL triage (read-only)
Host: CP-FW-01
Time: 20260222_095956
Log : /var/tmp/cluster_triage_CP-FW-01_20260222_095956.log
VS : (none)
============================================================
NOTE: cphaprob is typically used in Expert mode.
Log file: /var/tmp/cluster_triage_CP-FW-01_20260222_095956.log

===== cphaprob state =====

Cluster Mode: High Availability (Active Up) with IGMP Membership

ID Unique Address Assigned Load State Name

1 (local) 169.254.0.248 100% ACTIVE CP-FW-01
2 169.254.0.247 0% STANDBY CP-FW-02

Active PNOTEs: None

Last member state change event:
Event Code: CLUS-114904
State change: ACTIVE(!) -> ACTIVE
Reason for state change: Reason for ACTIVE! alert has been resolved
Event time: Tue Feb 17 08:28:56 2026

Cluster failover count:
Failover counter: 0
Time of counter reset: Tue Feb 17 08:27:16 2026 (reboot)

grep: Unmatched ( or \(

Detected local normalized state: ACTIVE

OK: Local member is ACTIVE (clean). No extra triage needed.
[Expert@CP-FW-01:0]#