Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
README.md 1.57 KiB
Newer Older
thl-cmk's avatar
thl-cmk committed
# Threat Emulation [(Download the MKP package)](/../../../-/raw/master/checkpoint_threat_emulation.mkp "Download MKP package")

**Note: this package is for CheckMK version 2.x. For other versions see the corresponding branch.**
thl-cmk's avatar
thl-cmk committed

Monitors status of Check Point Threat Emulation

Check Info:

* *service*: this check creates one service on the TE enbaled Check Point gateway
* *state*:\
  **critical**
  *  if monthly quota on cloud used greater then crit
  *  if remaining quota on cloud less then crit
  *  if current files waiting for emulation greater then crit

  **warning**
  *  if teUpdateStatus is not 'up-to-date'
  *  if teStatusCode is not '0'
  *  if teSubscriptionStatus is not 'valid'
  *  if teCloudSubscriptionStatus if not 'ok'
  *  if monthly quota on cloud used greater then warn
  *  if remaining quota on cloud less then warn
  *  if current files waiting for emulation greater then warn
  
* *wato*: you can configure warn/crit levels for
    * monthly quota on cloud used
    * remaining quota on cloud
    * current files waiting for emulation
* *perfdata*: 
    * average emulated file size (bytes)
    * average process time (s)
    * average queue size (count)
    * files scanned by threat cloud  (count)
    * files waiting for emulation (count)
    * malicious files detected (count)
    * malicious files detected by threat cloud (count)
    * monthly quota on cloud used (%)
    * peak queue size (count)
    * remaining quota on cloud (count)
    * scanned files (count)

Testetd with: R80.10

Sample output

![sample output](/doc/sample.png?raw=true "sample [SHORT TITLE]")