- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
I have been trying to find a good way to review the System Activity Reports (besides using the 'SmartConsole - Monitor function/graphs' and finally found a good solution after digging around the internet for a while.
The SAR data is stored in /var/log/sa/ directory.
There are two types of files contained there. The sa## file is the binary information and the sar## files are in human readable format.
By running the following command, you can get file 01 to 30 concatenated into a single file.
ls /var/log/sa/sa?? | xargs -i sar -A -f {} > /tmp/sar_$(uname -n).txt
Once you have this file (it's 50 to 100 mb) you can then go to this web site (https://sarchart.dotsuresh.com/) and drag the file across to it, and it will then parse it and provide the ability to dig into the graphs that are available.
Let me know if anyone else has a better solution.
Paul G, CCSM
Thanks for the 2 sk's.
I still like the graphics part mentioned in the original post
I like this part the best from the SK
Analysis:
I put this on my backlog: Create a SmartConsole extension to sar graphs in SmartConsole.
That would be a nice feature to have available. Look forward to it when you get to it.
Thank you,
Paul G
SAR is a linux feature, not part of CP SW. What of all this information can not be found in cpview ?
With enough digging into cpview it can probably be found.
The reason that I was looking for this capability was the result of health check reports with statements like:
CPU 30-Day Peak - WARNING
CPU 1 Peak Usage: 99
CPU 2 Peak Usage: 100
CPU 3 Peak Usage: 100
3 core(s) out of 4 went over 80% in the last month.
Please review the CPU usage on this device to see if a configuration change or hardware upgrade is needed.
I figured a graph of the CPUs was a faster way to identify where in the past 30 days this was occurring, and then dig into it from there.
Paul G. CCSM
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY