Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Alexander_Wilke
Advisor

Skyline - Instrument CheckPoint API (Traces, API calls, API routes, users, http response codes)

Hello,

the API gets more important for us and we have more an d different users and applications connecting to the API at the same time.

Sometimes we get feedback that some calls did not work or took very long. Unfortunately there is no skyline / OpenTelemetry export of the API usage.

 

I would like to see some metrics about

- connected users

- http status codes (200, 401, ...)

- POST, GET, ...

- bytes transferred per user / connection

- API routes like 

  • /web_api/add-host
  • /web_api/delete-host

 

I hope with these type of metrics I can better understand which API route/path has issues or caused issues because of specific http response codes. In addition I hope I can correlate system CPU/memory usage with amount of connected users, connections and API calls.

 

In a more far future it may be helpful to instrument further processes like apache, postgresql and maybe CPM to give a visibility which services is responding slowly and where the bottleneck is.

 

OpenTelemetry provides instrumentations for apache and postgres and java. maybe this is something which max help users and CP internal teams.

 

Learn how to instrument Apache Http Server with OpenTelemetry | OpenTelemetry

opentelemetry-collector-contrib/receiver/postgresqlreceiver/documentation.md at main · open-telemetr...

 

However, my question is, are there any plans ans possibilities to provide more information about the API, connected user, API routes and response codes.

 

Regards

Alexander

 

 

 

0 Kudos
6 Replies
PhoneBoy
Admin
Admin

That would require such activity to be instrumented, of course, which it probably isn’t at current.
Adding @Omer_Kleinstern for visibility.

0 Kudos
Vincent_Bacher
Advisor
Advisor

Custom script support will be a way to collect metrics which are not out of the box integrated into Skyline

and now to something completely different - CCVS, CCAS, CCTE, CCCS, CCSM elite
0 Kudos
Alexander_Wilke
Advisor

Instrumenting these applications may work - or not. maybe some are password proteced.
However - support - is the magic word. I do not want to run software piece which integrate (deep) into the main system and are not supported.

However - opentelemetry is an important opensource product and it may be relevant in other parts ike OpenAppsc.io or opensource project for a web application firewall of checkpoint or the payed solution. If you are running a WAF and Loadbalancer you may be interested in these types of metrics.

nevertheless - thanks for feedback!

0 Kudos
Vincent_Bacher
Advisor
Advisor

I should not say this here but tbh. i would not use CP as WAF 🙂

and now to something completely different - CCVS, CCAS, CCTE, CCCS, CCSM elite
(1)
Alexander_Wilke
Advisor

I do not and do not plan to do so. However it is a CP product and maybe they use this chance to implement OpeneTelemtry traces/metrics 😛

0 Kudos
Vincent_Bacher
Advisor
Advisor

Indeed. We are testing Skyline in our environment and are absolutely happy to have opentelemetry on board.
Running it on round about 100 devices (VSX, OpenServer).
But unfortunately it's still very buggy.

and now to something completely different - CCVS, CCAS, CCTE, CCCS, CCSM elite
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events