Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
README.md 2.85 KiB
Newer Older
thl-cmk's avatar
thl-cmk committed
[PACKAGE]: ../../raw/master/mkp/checkpoint_log_exporter-0.0.5-20230529.mkp "checkpoint_log_exporter-0.0.5-20230529.mkp"
thl-cmk's avatar
thl-cmk committed
# Log exporter agent plugin
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
This is a agent plugin to monitor the statrus of the Check Point log exporter `cp_log_export`.
thl-cmk's avatar
thl-cmk committed

---
### Download
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* [Download latest mkp file][PACKAGE]
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
**Note**: before you update to a newer version, always check the [CHANGELOG](CHANGELOG). There might be incompatible changes.
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
---                   
### Installation
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
You can install the package by uploading it to your CheckMK site and as site user run 
```
mkp install PACKAGENAME-VERSION.mkp
```
or beginning with CMK2.2.x
```
mkp add PACKAGENAME-VERSION.mkp
mkp enable PACKAGENAME VERSION
```
In the non RAW editions of CheckMK you can use the GUI to install the package (_Setup_ -> _Extension Packages_ -> _Upload package_)
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
After you have installed the plugin you need to copy the agent plugin (`agents/plugins/checkpoint_log_exporter.sh`) to your checkmk agent plugins directory.

thl-cmk's avatar
thl-cmk committed
See here for more information on [how to use a Check Point appliance with the checkmk agent](doc/howto-install-cmk-agent.md). To add this plugin to your Checkmk agent installation see [here](doc/cp_log_exporter.md).
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
---
### Want to Contribute?
Nice ;-) Have a look at the [contribution guidelines](CONTRIBUTING.md "Contributing")

---
### Check Info

thl-cmk's avatar
thl-cmk committed
The plugin creates the service **_Log exporter_** with the **_name of the log exporter_** as item.
thl-cmk's avatar
thl-cmk committed

<details><summary>Montoring states</summary>

| State | condition | WATO | 
| ------ | ------ | ------ |
thl-cmk's avatar
thl-cmk committed
| WARN | if the exporter is not running | yes |
| WARN/CRIT | if the exporter is running, but has not read the log for 60/120 seconds | yes |
thl-cmk's avatar
thl-cmk committed

</details>

<details><summary>Perfdata</summary>

thl-cmk's avatar
thl-cmk committed
There are no perfdata
thl-cmk's avatar
thl-cmk committed

</details>

---
### WATO
<details><summary>Service monitoring rule</summary>

| Section | Rule name |
| ------ | ------ |
thl-cmk's avatar
thl-cmk committed
| Networking | Check Point log exporter  |
thl-cmk's avatar
thl-cmk committed

| Option | Defailt value |
| ------ | ------ |
thl-cmk's avatar
thl-cmk committed
| Maximum seconds not read | 60/120 seconds |
| State not running | WARN |
thl-cmk's avatar
thl-cmk committed

</details> 

<details><summary>Discovery rule</summary>

thl-cmk's avatar
thl-cmk committed
There is no discovery rule.
thl-cmk's avatar
thl-cmk committed

</details> 

---
### Sample Output

Sample output

thl-cmk's avatar
thl-cmk committed
![sample output](img/sample.png?raw=true "sample output")
thl-cmk's avatar
thl-cmk committed

Sample output details

thl-cmk's avatar
thl-cmk committed
![sample output details](img/sample-details.png?raw=true "sample output details")
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
<details><summary>Sample agent output</summary>

```
<<<checkpoint_log_exporter:sep(0)>>>

thl-cmk's avatar
thl-cmk committed
name: <REMOVED>
thl-cmk's avatar
thl-cmk committed
status: Not running
last log read at: 20 Jul 9:19:35
debug file: /opt/CPrt-R81.10/log_exporter/targets/<REMOVED>/log/log_indexer.elg

thl-cmk's avatar
thl-cmk committed
name: <REMOVED>
thl-cmk's avatar
thl-cmk committed
status: Running (77996)
last log read at: 13 Oct 14:40:54
debug file: /opt/CPrt-R81.10/log_exporter/targets/<REMOVED>/log/log_indexer.elg

thl-cmk's avatar
thl-cmk committed
name: <REMOVED>
thl-cmk's avatar
thl-cmk committed
status: Running (78617)
last log read at: 6 Dec 15:54:55
debug file: /opt/CPrt-R81.10/log_exporter/targets/<REMOVED>/log/log_indexer.elg
```


</details>