Trap/Syslog Flood from Collector server

Products

• VMware Smart Assurance

Issue/Introduction

Trap alert generated in external monitoring system from Smarts with regards to high CPU utilization. 

Environment

Smarts - 10.1.x

Resolution

No issue is observed in Smarts, it is working as designed. 

Enabled subscription on multiprocusage 1.3.6.1.4.1.2620.1.6.7.5.1.5 also performed walk on multiprocusage OID, noticed that device is randomly giving 100% utilization and falls to lowest/actual utilization value. 

Device is giving wrong CPU utilization value due to some bug at checkpoint end. 

 

Checkpoint vendor has identified it as a bug and provided fix which to upgrade firewall to latest version or to poll different OID (1.3.6.1.4.1.2620.1.56.101.2.1.3) to get correct CPU utilization value. 

Checkpoint KB: SNMP query for OID 1.3.6.1.4.1.2620.1.6.7.5.1.5 (CPU utilization) may return an incorrect value

Solution screenshot from above Checkpoint KB link: