For example I found in vRNI that you can type in "Security" and there is a default query that returns great information.
- Firewall rule membership changes in the last day
- Firewall config changes in the last day
- Unused IPSets, Security Groups, Security Tags, etc.
I assume we also want to understand backups and how NSX connects in the backend. There is an event that can be alerted to within vRNI:
One or more OSPF neighbors unreachable from NSX Edge router