Appgate SDP

Supported OS Linux Mac OS

Integration version1.1.0

Overview

This check monitors Appgate SDP through the Datadog Agent.

  • Monitors the health and performance of Appgate SDP appliances, controllers, and gateways by collecting key metrics.
  • Provides visibility into resource utilization, active connections, session counts, and license usage to help ensure secure and efficient access management.
  • Enables proactive alerting and troubleshooting by tracking critical indicators such as CPU, memory, disk usage, and system events across distributed environments.

Setup

Follow the instructions below to install and configure this check for an Agent running on a host. For containerized environments, see the Autodiscovery Integration Templates for guidance on applying these instructions.

Installation

The Appgate SDP check is included in the Datadog Agent package. No additional installation is needed on your server.

Configuration

  1. Edit the appgate_sdp.d/conf.yaml file, in the conf.d/ folder at the root of your Agent’s configuration directory to start collecting your Appgate SDP performance data. See the sample appgate_sdp.d/conf.yaml for all available configuration options.

  2. Restart the Agent.

Validation

Run the Agent’s status subcommand and look for appgate_sdp under the Checks section.

Data Collected

Metrics

appgate_sdp.appliance.active_connections
(gauge)
The current number of active connections.
Shown as connection
appgate_sdp.appliance.active_connections.max
(gauge)
The maximum number of active connections.
Shown as connection
appgate_sdp.appliance.audit_events.count
(count)
A count of the number of audit events.
Shown as event
appgate_sdp.appliance.audit_logs.count
(count)
A count of the number of audit log transmissions.
appgate_sdp.appliance.certificate_days.remaining
(gauge)
The number of days remaining until certificate expiration.
appgate_sdp.appliance.cpu.percent_usage
(gauge)
The CPU usage of an appliance.
Shown as percent
appgate_sdp.appliance.disk
(gauge)
The disk usage of an appliance.
appgate_sdp.appliance.disk.partition_statistic
(gauge)
The disk partition usage of an appliance.
appgate_sdp.appliance.dns.cache_entries
(gauge)
The number of elements in the DNS cache, differentiated by cache type.
appgate_sdp.appliance.dns.requests.count
(count)
The count of DNS requests made per zone, protocol and family.
Shown as request
appgate_sdp.appliance.dns.responses.count
(count)
The count of DNS responses made per zone, protocol and family.
Shown as response
appgate_sdp.appliance.function.sessions
(gauge)
The number of sessions for this appliance function.
appgate_sdp.appliance.function.status
(gauge)
The status of the appliance function.
appgate_sdp.appliance.function.suspended
(gauge)
The suspended status of an appliance function, differentiated by reason.
appgate_sdp.appliance.image.size
(gauge)
The size of the appliance image partition in bytes.
Shown as byte
appgate_sdp.appliance.memory
(gauge)
The memory usage of the appliance in bytes.
Shown as byte
appgate_sdp.appliance.network_interface.speed
(gauge)
The network interface speed in bits per second.
appgate_sdp.appliance.network_interface.statistic.count
(count)
The statistics on the network interface of the appliance.
appgate_sdp.appliance.proxy.protocol_messages.count
(count)
The number of proxy protocol messages processed.
Shown as message
appgate_sdp.appliance.snat
(gauge)
The number of UDP/TCP ports or ICMP types used for Source Network Address Translation (SNAT).
appgate_sdp.appliance.spa.dropped_packets.count
(count)
The number of dropped SPA packets.
Shown as packet
appgate_sdp.appliance.spa.packet_authorization_time
(gauge)
The SPA packet authorization time.
appgate_sdp.appliance.spa.packets.count
(count)
The number of SPA (Single Packet Authorization) packets processed by the appliance.
Shown as packet
appgate_sdp.appliance.spa.replay_attack_cache_entries.count
(count)
The number of entries in the SPA (Single Packet Authorization) replay attack cache.
appgate_sdp.appliance.state_size
(gauge)
The size of this appliance state partition in bytes.
Shown as byte
appgate_sdp.appliance.status
(gauge)
The status of an appliance in your network.
appgate_sdp.appliance.volume_number
(gauge)
The volume number of an appliance.
appgate_sdp.controller.admin.authentication.count
(count)
The API call count for admin authentication.
appgate_sdp.controller.admin.authorization.count
(count)
The API call count for admin authorization.
appgate_sdp.controller.admin.evaluate_all_policies.count
(count)
The API call count for admin evaluatuation of all policies.
appgate_sdp.controller.admin.mfa.count
(count)
The API call count for admin multi-factor authentication (MFA).
appgate_sdp.controller.client.authentication.count
(count)
The API call count for client authentication.
appgate_sdp.controller.client.authorization.count
(count)
The API call count for client authorization.
appgate_sdp.controller.client.csr.count
(count)
The API call counts for client CSR (Certificate Signing Request) operations.
appgate_sdp.controller.client.enter.password.count
(count)
The API call count for client enter password.
appgate_sdp.controller.client.evaluate_all_policies.count
(count)
The API call count for client evaluatuation of all policies.
appgate_sdp.controller.client.mfa.count
(count)
The API call count for client multi-factor authentication (MFA).
appgate_sdp.controller.client.new_ip_allocation.count
(count)
The API call count for client new IP allocation.
appgate_sdp.controller.client.risk_engine_response.count
(count)
The API call count for client risk engine response.
Shown as response
appgate_sdp.controller.client.sign_in_with_mfa.count
(count)
The API call count for client sign in with multi-factor authentication (MFA).
appgate_sdp.controller.database.conflicts
(gauge)
The number of database BDR (Bi-Directional Replication) conflicts for the controller.
appgate_sdp.controller.database.node_state
(gauge)
The state of a node within the BDR system.
appgate_sdp.controller.database.raft_state
(gauge)
The raft state of a node in the controller's BDR system.
appgate_sdp.controller.database.replication
(gauge)
The connection status of nodes in the controller's BDR system.
appgate_sdp.controller.database.replication.slot_replay_lag
(gauge)
The replication lag for a specific replication slot in the controller's BDR system in bytes.
Shown as byte
appgate_sdp.controller.database.size
(gauge)
The size of the PostgreSQL database used by the controller in bytes.
Shown as byte
appgate_sdp.controller.evaluate_user_claim_script.count
(count)
The execution and performance of User Claim Scripts within the controller system.
appgate_sdp.controller.ip_pool
(gauge)
The usage of IP addresses from a specific IP pool.
appgate_sdp.controller.license
(gauge)
The license entitlements for different types of users or features in your system.
appgate_sdp.controller.license.days_remaining
(gauge)
The number of days remaining until the next license expiration for the appliance.
Shown as day
appgate_sdp.controller.memory_heap
(gauge)
The memory heap usage of the controller daemon.
Shown as byte
appgate_sdp.controller.policy_evaluator
(gauge)
The cache size used by the controller policy evaluator.
Shown as byte
appgate_sdp.controller.threads
(gauge)
The number of threads currently running for the controller daemon on the appliance.
Shown as thread
appgate_sdp.gateway.azure_resolver.cache.count
(count)
The count of various operations on the Azure Resolver cache, including cache hits, misses, insertions, and evictions.
appgate_sdp.gateway.azure_resolver.cache_ttl
(gauge)
The time to live (TTL) of the Azure Resolver cache.
appgate_sdp.gateway.dns_forwarder.cache.count
(count)
The cache performance of the DNS forwarder, specifically the hits and misses in the DNS forwarder cache
appgate_sdp.gateway.dns_forwarder.domain.count
(count)
The number of DNS forwarder domain hits.
appgate_sdp.gateway.dns_forwarder.query.count
(count)
The number of DNS forwarder domain queries.
appgate_sdp.gateway.event_queue.period_peak
(gauge)
The current peak size for gateway event queue.
appgate_sdp.gateway.event_queue.size
(gauge)
The size of the gateway event queue for the given measure.
appgate_sdp.gateway.ha_interface.count
(count)
The activity of network interfaces that are part of a high-availability setup.
appgate_sdp.gateway.http.action.count
(count)
The count of HTTP actions processed by a gateway, specifically distinguishing between allowed and blocked HTTP actions.
appgate_sdp.gateway.http.connection.count
(count)
The number of HTTP connections processed by the gateway, specifically distinguishing between accepted and handled connections.
appgate_sdp.gateway.http.open_connection
(gauge)
The number of open HTTP connections on the gateway, categorized by their current state (active or reading).
appgate_sdp.gateway.http.requests.count
(count)
The total number of HTTP requests processed by the gateway.
Shown as request
appgate_sdp.gateway.illumio.resolver.cache.count
(count)
The metric count of the Illumio resolver cache.
appgate_sdp.gateway.illumio.resolver.cache_ttl
(gauge)
The time to live (TTL) for the Illumio resolver cache.
appgate_sdp.gateway.illumio.resolver.label
(gauge)
The number of labels tracked by Illumio Resolver.
appgate_sdp.gateway.name.resolver.cache.count
(count)
The usage of the resolver's cache.
appgate_sdp.gateway.name.resolver.names_missing_resolver
(gauge)
The number of resource names configured on sites where the required resolver has not been configured.
appgate_sdp.gateway.name.resolver.value
(gauge)
The number of resources discovered.
appgate_sdp.gateway.policy.evaluator
(gauge)
The cache size of the gateway's policy evaluator.
Shown as byte
appgate_sdp.gateway.session.dropped_signin.count
(count)
The number of gateway sessions that were dropped at sign-in.
Shown as session
appgate_sdp.gateway.session.event.count
(count)
The number of session events that have occurred on the gateway.
Shown as event
appgate_sdp.gateway.session.event_timing
(gauge)
The timing for session-related events on the gateway.
appgate_sdp.gateway.session.js_exectime
(gauge)
The gateway session javascript execution time in milliseconds.
Shown as millisecond
appgate_sdp.gateway.sessiond.heap
(gauge)
The gate sessiond heap value.
Shown as byte
appgate_sdp.gateway.sessiond.thread_count
(gauge)
The gateway sessiond thread count value.
Shown as thread
appgate_sdp.gateway.token_size
(gauge)
The value for given a measure of token size.
Shown as byte
appgate_sdp.gateway.vpn.client_metric
(gauge)
The measures, such as the uptime of all sites and DNS lookup failures, on the client
appgate_sdp.gateway.vpn.memory_usage
(gauge)
The total memory usage by the firewall engine in bytes
appgate_sdp.gateway.vpn.resolved_actions
(gauge)
The number of resolve solved actions
appgate_sdp.gateway.vpn.rules
(gauge)
The number of firewall rules
appgate_sdp.gateway.vpn.rules_size
(gauge)
The size of the firewall rules in bytes for VPN sessions on a gateway.
Shown as byte
appgate_sdp.gateway.vpn.sessions
(gauge)
The number of VPN sessions on a particular gateway appliance.
Shown as session
appgate_sdp.portal.client
(gauge)
The portal client statistics on the appliance.

Events

The Appgate SDP integration does not include any events.

Service Checks

appgate_sdp.openmetrics.health
Returns CRITICAL if the Agent is unable to connect to the Appgate SDP OpenMetrics endpoint, otherwise returns OK.
Statuses: ok, critical

Troubleshooting

Need help? Contact Datadog support.

PREVIEWING: guacbot/translation-pipeline