Skip to content

Commit

Permalink
add ext-firewall vendors (#307)
Browse files Browse the repository at this point in the history
  • Loading branch information
thezackm committed Sep 14, 2021
1 parent 7ec061a commit d02032f
Show file tree
Hide file tree
Showing 8 changed files with 459 additions and 45 deletions.
1 change: 0 additions & 1 deletion definitions/ext-db2/dashboard.json
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
{
"name": "DB2 Database Status",
"description": null,
"permissions": "PUBLIC_READ_WRITE",
"pages": [{
"name": "DB2 Database Status",
"description": null,
Expand Down
125 changes: 125 additions & 0 deletions definitions/ext-firewall/cisco-asa-dashboard.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,125 @@
{
"name": "Cisco ASA Firewall",
"description": null,
"pages": [
{
"name": "Cisco ASA Firewall",
"description": null,
"widgets": [
{
"visualization": {
"id": "viz.billboard"
},
"layout": {
"column": 1,
"row": 1,
"height": 4,
"width": 4
},
"title": "Device Uptime",
"rawConfiguration": {
"dataFormatters": [
{
"name": "Total Hours",
"precision": null,
"type": "decimal"
},
{
"name": "Total Days",
"precision": null,
"type": "decimal"
}
],
"nrqlQueries": [
{
"accountId": 0,
"query": "FROM Metric SELECT latest(`kentik.snmp.Uptime`)/100/60/60/24 AS 'Total Days', latest(`kentik.snmp.Uptime`)/100/60/60 AS 'Total Hours' WHERE provider = 'kentik-firewall'"
}
],
"thresholds": []
}
},
{
"visualization": {
"id": "viz.line"
},
"layout": {
"column": 5,
"row": 1,
"height": 4,
"width": 6
},
"title": "CPU Utilization %",
"rawConfiguration": {
"dataFormatters": [],
"legend": {
"enabled": true
},
"nrqlQueries": [
{
"accountId": 0,
"query": "FROM Metric SELECT max(kentik.snmp.CPU) AS 'CPU Utilization %' TIMESERIES 5 MINUTES"
}
],
"yAxisLeft": {
"max": 100,
"min": 0,
"zero": false
}
}
},
{
"visualization": {
"id": "viz.billboard"
},
"layout": {
"column": 1,
"row": 5,
"height": 4,
"width": 4
},
"title": "Total Active Sessions",
"rawConfiguration": {
"dataFormatters": [],
"nrqlQueries": [
{
"accountId": 0,
"query": "FROM Metric SELECT latest(kentik.snmp.crasNumSessions) AS 'Active Sessions' SINCE 10 MINUTES AGO COMPARE WITH 1 DAY AGO"
}
],
"thresholds": []
}
},
{
"visualization": {
"id": "viz.line"
},
"layout": {
"column": 5,
"row": 5,
"height": 4,
"width": 6
},
"title": "Memory Utilization %",
"rawConfiguration": {
"dataFormatters": [],
"legend": {
"enabled": true
},
"nrqlQueries": [
{
"accountId": 0,
"query": "FROM Metric SELECT max(kentik.snmp.MemoryUtilization) AS 'Memory Utilization %' TIMESERIES 5 MINUTES"
}
],
"yAxisLeft": {
"max": 100,
"min": 0,
"zero": false
}
}
}
]
}
]
}
14 changes: 9 additions & 5 deletions definitions/ext-firewall/definition.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,4 @@
domain: EXT
# Firewall devices from Kentik using Metric API
# Note this initial definition is limited to only Fortigate Firewalls using the FORTINET-FORTIGATE-MIB
# Future firewall entities will need to be isolated in the definition
type: FIREWALL
synthesis:
name: device_name
Expand All @@ -20,5 +17,12 @@ goldenTags:
- device_ip

dashboardTemplates:
kentik:
template: kentik-dashboard.json
# Cisco ASA profiles (default)
kentik/cisco-asa:
template: cisco-asa-dashboard.json
# Palo Alto profiles
kentik/palo-alto:
template: palo-alto-dashboard.json
# Fortinet Fortigate profiles
kentik/fortinet-fortigate:
template: fortinet-fortigate-dashboard.json
62 changes: 41 additions & 21 deletions definitions/ext-firewall/golden_metrics.yml
Original file line number Diff line number Diff line change
@@ -1,27 +1,47 @@
cpuUtilization:
title: CPU Utilization (%)
query:
select: max(kentik.snmp.fgSysCpuUsage)
from: Metric
where: "provider = 'kentik-firewall'"
queries:
kentik/cisco-asa:
select: max(kentik.snmp.CPU)
from: Metric
where: "provider = 'kentik-firewall'"
kentik/palo-alto:
select: max(kentik.snmp.hrProcessorLoad)
from: Metric
where: "provider = 'kentik-firewall' AND Index = '.1'"
kentik/fortinet-fortigate:
select: max(kentik.snmp.fgSysCpuUsage)
from: Metric
where: "provider = 'kentik-firewall'"

memoryUtilization:
title: Memory Utilization (%)
query:
select: (max(kentik.snmp.fgSysMemUsage) / max(kentik.snmp.fgSysMemCapacity)) * 100
from: Metric
where: "provider = 'kentik-firewall'"
queries:
kentik/cisco-asa:
select: max(kentik.snmp.MemoryUtilization)
from: Metric
where: "provider = 'kentik-firewall'"
kentik/palo-alto:
select: (max(kentik.snmp.hrStorageUsed) / max(kentik.snmp.hrStorageSize)) * 100
from: Metric
where: "provider = 'kentik-firewall' AND storage_description LIKE '%Management Memory%'"
kentik/fortinet-fortigate:
select: (max(kentik.snmp.fgSysMemUsage) / max(kentik.snmp.fgSysMemCapacity)) * 100
from: Metric
where: "provider = 'kentik-firewall'"

lowmemUtilization:
title: Lowmem Utilization (%)
query:
select: (max(kentik.snmp.fgSysLowMemUsage) / max(kentik.snmp.fgSysLowMemCapacity)) * 100
from: Metric
where: "provider = 'kentik-firewall'"

ipSessionRate:
title: IP Session Rate (1min)
query:
select: latest(kentik.snmp.fgSysSesRate1) + latest(kentik.snmp.fgSysSes6Rate1)
from: Metric
where: "provider = 'kentik-firewall'"
sessionsTotal:
title: Current Sessions
queries:
kentik/cisco-asa:
select: latest(kentik.snmp.crasNumSessions)
from: Metric
where: "provider = 'kentik-firewall'"
kentik/palo-alto:
select: max(kentik.snmp.panSessionActive)
from: Metric
where: "provider = 'kentik-firewall'"
kentik/fortinet-fortigate:
select: latest(kentik.snmp.fgSysSesCount) + latest(kentik.snmp.fgSysSes6Count)
from: Metric
where: "provider = 'kentik-firewall'"
Loading

0 comments on commit d02032f

Please sign in to comment.