README.md

[PACKAGE]: ../../raw/master/mkp/checkpoint_threat_emulation-0.2.0-20230529.mkp "checkpoint_threat_emulation-0.2.0-20230529.mkp"
# Threat Emulation

Monitors status of Check Point Threat Emulation

---
### Check Info

* *service*: this check creates one service on the TE enbaled Check Point gateway

* *state*:\

  **critical**
  *  if monthly quota on cloud used greater then crit
  *  if remaining quota on cloud less then crit
  *  if current files waiting for emulation greater then crit

  **warning**
  *  if teUpdateStatus is not 'up-to-date'
  *  if teStatusCode is not '0'
  *  if teSubscriptionStatus is not 'valid'
  *  if teCloudSubscriptionStatus if not 'ok'
  *  if monthly quota on cloud used greater then warn
  *  if remaining quota on cloud less then warn
  *  if current files waiting for emulation greater then warn
  
* *wato*: you can configure warn/crit levels for
    * monthly quota on cloud used
    * remaining quota on cloud
    * current files waiting for emulation

* *perfdata*: 
    * average emulated file size (bytes)
    * average process time (s)
    * average queue size (count)
    * files scanned by threat cloud  (count)
    * files waiting for emulation (count)
    * malicious files detected (count)
    * malicious files detected by threat cloud (count)
    * monthly quota on cloud used (%)
    * peak queue size (count)
    * remaining quota on cloud (count)
    * scanned files (count)

Testetd with: R80.10

---
### Download

* [Download latest mkp file][PACKAGE]

**Note**: before you update to a newer version, always check the [CHANGELOG](CHANGELOG). There might be incompatible changes.

---                   
### Installation

You can install the package by uploading it to your CheckMK site and as site user run 
```
mkp install PACKAGENAME-VERSION.mkp
```
or beginning with CMK2.2.x
```
mkp add PACKAGENAME-VERSION.mkp
mkp enable PACKAGENAME VERSION
```
In the non RAW editions of CheckMK you can use the GUI to install the package (_Setup_ -> _Extension Packages_ -> _Upload package_)

---
### Want to contribute?

Nice ;-) Have a look at the [contribution guidelines](CONTRIBUTING.md "Contributing")

---
### Sample output

![sample output](img/sample.png?raw=true "sample [SHORT TITLE]")