Grafana with Prometheus for Check Point Skyline

A monitoring solution for Checkpoint physical and virtual appliances. this docker compose script will install and configure an instance of Prometheus and Grafana as seperate containers, including required configuration parameters and dashboard templates. The script will pull the official images, and use the Grafana provisioning feature to automatically configure the Grafana datasource and dashboard template. Prometheus, Grafana, Skyline

**Note - this connfiguration does not use TLS to secure any communication. If you want to use secured the communication, please refer to the Skyline-TLS repository which requires a few more steps to deploy. Skyline-TLS

Install Docker

Install Docker-CE and docker-compose:

curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh
curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

Install Containers

Clone this repository on your Docker host, cd into the skyline directory and run compose up:

git clone https://github.com/deangoldhill/skyline.git
cd skyline

docker-compose up -d

Setup Grafana

Navigate to http://<DOCKERHOST>:3000 and login with user admin password admin. You can change the password from within the Grafana portal, or you can modify the credentials in the compose file.

Grafana is preconfigured with dashboards and Prometheus as the default data source:

* Name: SKYLINE_PROMETHEUS
* Type: Prometheus
* Url: http://prometheus:9090

There are 4 Skyline dashboards

***Machines Overview***

Machines with top CPU / Memory utilisations
Vital stastics of selected (filter) machine.


***Single Machine***
In-depth information and statistics for a single machine,
Hardware resource consumption, version info, policy info, network throughput, connections,Drops, errors etc.

***Scalable Platforms***
As above but for Maestro platforms

***VSX***
VSX server and indavidual virtual system stastics

Setup Skyline on Check Point machines

Create a configuration payload file on each Check Point machine with the following contents, and import it. Modify with the IP or hostname of your docker host.

cd /var/tmp
vi payload.json
***paste the following*** (Modify <DOCKERHOST> with the IP or hostname of your docker host.)

 {
    "enabled": true,
    "export-targets": {"add": [
        {
            "enabled": true,
            "type": "prometheus-remote-write",
            "url": "http://<DOCKERHOST>:9090/api/v1/write"
        }
    ]}
} 

***

/opt/CPotelcol/REST.py --set_open_telemetry "$(cat payload.json)"