#  Cisco TrustSec 

Collection of Cisco TrustSec checks
*  *cisco_trustsec_pac*: monitors the TustSec PAC status
*  *cisco_trustsec_environment*: monitors the TrustSec environment status
*  *cisco_trustsec_sxp_peer*: monitors the status of TrustSec SXP peers

## Check Info *cisco_trustsec_pac*:

* *service*: this check creates one service each PAC entry
* *state*: **critical**/**warning** if outside the configured levels. Default is 5/8 days.
* *wato*: **critical**/**warning** levels for to PAC expiration in days
* *perfdata*: None

Sample output

![sample output](/doc/sample_trustsec_pac.png?raw=true "sample [SHORT TITLE]")

## Check Info *cisco_trustsec_environment*:

* *service*: this check creates the service TrustSec environment
* *state*: 
    * **critical** if *environment download status* is *failed*, *incomplete* or *timedout*. Can be configured via WATO.
    * **warning** if *environment download status* is *other*, *inprogress* or *cleared*. Can be configured via WATO.
    * **critical**/**warning** if refresh overdue outside the configured levels. Default is 8/1 hours.
* *wato*: 
    * **critical**/**warning** levels for refresh overdue in hours. 
    * Levels for *environment download status*
* *perfdata*: none

Sample output

![sample output](/doc/sample_trustsec_env.png?raw=true "sample [SHORT TITLE]")

## Check Info *cisco_trustsec_sxp_peer*:

* *service*: this check creates one for each SXP peer
* *state*: 
    *  **critical** if peer status is *off*. Can be configured via WATO.
    *  **warning** if peer status is *other*, *pending on* or *delete hold down*. Can be configured via WATO.
    *  **critical**/**warning** if uptime less than the configured levels. Default is 10/60 minutes.
* *wato*: 
    * **critical**/**warning** levels for minimal uptime in minutes
    * Levels for SXP peer status
* *perfdata*: uptime

Sample output

![sample output](/doc/sample_trustsec_sxp_peer.png?raw=true "sample [SHORT TITLE]")