Newer
Older
# Cisco TrustSec [(Download the MKP package)](/../../../-/raw/master/cisco_trustsec.mkp "Download MKP package")
**Note: this package is for CheckMK version 2.x. For other versions see the corresponding branch.**
Collection of Cisco TrustSec checks
* *cisco_trustsec_pac*: monitors the TustSec PAC status
* *cisco_trustsec_environment*: monitors the TrustSec environment status
* *cisco_trustsec_sxp_peer*: monitors the status of TrustSec SXP peers
* *cisco_trustsec_server*: monitors the status of TrustSec download servers
* *state*: **critical**/**warning** if outside the configured levels. Default is 5/8 days.
* *wato*: **critical**/**warning** levels for to PAC expiration in days
* *perfdata*: None
Sample output
![sample output](/doc/sample_trustsec_pac.png?raw=true "sample [SHORT TITLE]")
## Check Info *cisco_trustsec_environment*:
* *service*: this check creates the service TrustSec environment
* *state*:
* **critical** if *environment download status* is *failed*, *incomplete* or *timedout*. Can be configured via WATO.
* **warning** if *environment download status* is *other*, *inprogress* or *cleared*. Can be configured via WATO.
* **critical**/**warning** if refresh overdue outside the configured levels. Default is 8/1 hours.
* *wato*:
* **critical**/**warning** levels for refresh overdue in hours.
* Levels for *environment download status*
![sample output](/doc/sample_trustsec_env.png?raw=true "sample [SHORT TITLE]")
## Check Info *cisco_trustsec_sxp_peer*:
* *service*: this check creates one for each SXP peer
* **critical** if peer status is *off*. Can be configured via WATO.
* **warning** if peer status is *other*, *pending on* or *delete hold down*. Can be configured via WATO.
* **critical**/**warning** if uptime less than the configured levels. Default is 10/60 minutes.
* *wato*:
* **critical**/**warning** levels for minimal uptime in minutes
* Levels for SXP peer status
![sample output](/doc/sample_trustsec_sxp_peer.png?raw=true "sample [SHORT TITLE]")