Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
README.md 2.19 KiB
Newer Older
thl-cmk's avatar
thl-cmk committed
#  Cisco TrustSec  [(Download the MKP package)](/../../../-/raw/master/cisco_trustsec.mkp "Download MKP package")

**Note: this package is for CheckMK version 2.x. For other versions see the corresponding branch.**
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
Collection of Cisco TrustSec checks
*  *cisco_trustsec_pac*: monitors the TustSec PAC status
*  *cisco_trustsec_environment*: monitors the TrustSec environment status
*  *cisco_trustsec_sxp_peer*: monitors the status of TrustSec SXP peers
thl-cmk's avatar
thl-cmk committed
*  *cisco_trustsec_server*: monitors the status of TrustSec download servers
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
## Check Info *cisco_trustsec_pac*:
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* *service*: this check creates one service each PAC entry
thl-cmk's avatar
thl-cmk committed
* *state*: **critical**/**warning** if outside the configured levels. Default is 5/8 days.
* *wato*: **critical**/**warning** levels for to PAC expiration in days
* *perfdata*: None
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
Sample output

![sample output](/doc/sample_trustsec_pac.png?raw=true "sample [SHORT TITLE]")
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
## Check Info *cisco_trustsec_environment*:

* *service*: this check creates the service TrustSec environment
* *state*: 
thl-cmk's avatar
thl-cmk committed
    * **critical** if *environment download status* is *failed*, *incomplete* or *timedout*. Can be configured via WATO.
    * **warning** if *environment download status* is *other*, *inprogress* or *cleared*. Can be configured via WATO.
    * **critical**/**warning** if refresh overdue outside the configured levels. Default is 8/1 hours.
* *wato*: 
    * **critical**/**warning** levels for refresh overdue in hours. 
    * Levels for *environment download status*
thl-cmk's avatar
thl-cmk committed
* *perfdata*: none
thl-cmk's avatar
thl-cmk committed

Sample output

thl-cmk's avatar
thl-cmk committed
![sample output](/doc/sample_trustsec_env.png?raw=true "sample [SHORT TITLE]")

## Check Info *cisco_trustsec_sxp_peer*:

* *service*: this check creates one for each SXP peer
thl-cmk's avatar
thl-cmk committed
* *state*: 
thl-cmk's avatar
thl-cmk committed
    *  **critical** if peer status is *off*. Can be configured via WATO.
    *  **warning** if peer status is *other*, *pending on* or *delete hold down*. Can be configured via WATO.
    *  **critical**/**warning** if uptime less than the configured levels. Default is 10/60 minutes.
* *wato*: 
    * **critical**/**warning** levels for minimal uptime in minutes
    * Levels for SXP peer status
thl-cmk's avatar
thl-cmk committed
* *perfdata*: uptime

Sample output
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
![sample output](/doc/sample_trustsec_sxp_peer.png?raw=true "sample [SHORT TITLE]")