Extend your Checkmk monitoring with packages created by community members. Or create your own packages and share the here with the rest of the community.
by kleinski
# Rubrik REST API Special Agent **IMPORTANT: Migration to RSC** Since version 1.5.0, the agent uses Rubrik Security Cloud (RSC) GraphQL exclusively. Because of this architectural change, **existing rules for the legacy integration must be recreated**. The agent provides the following services: * Cluster System Status * Compliance 24 Hours (cluster-side) * Disk * Node Hardware Health * Node Status (node-side) * Bandwidth * Storage Runway * Event Logwatch Monitor a single cluster by name or UUID, or select **SaaS** in the special agent rule to monitor all clusters visible to the service account. Node data is provided via piggyback. In SaaS mode, cluster hosts are also provided via piggyback. **Dynamic Host Configuration** is recommended to create these hosts automatically. ### Event Logwatch Event Logwatch is reported on the querying host rather than via piggyback. Event state is stored separately for each querying host and cluster UUID, including when switching clusters in SaaS mode. At least one of the following event filters must be configured: * Severity * Activity types * Activity status * Object type Without a filter, Event Logwatch is disabled, even if the section is selected in the rule. This is intended to reduce the risk of lockouts caused by unfiltered event requests. Filter values can be identified by inspecting requests from the Rubrik SaaS Events page using the browser developer tools. ### Storage Runway The configurable Storage section reports the estimated remaining capacity in days. Missing runway values result in **UNKNOWN** rather than being interpreted as zero days. ### Node Hardware Health The **Rubrik Node Hardware Health** ruleset provides exceptions for selected hardware health policies. An unhealthy policy can be ignored or mapped to **OK**, **WARN**, or **CRIT**. Healthy policies remain **OK**; unconfigured unhealthy policies remain **CRIT**. The worst evaluated state determines the service state. Original findings remain visible in the service details, including ignored or mapped policies. If all returned policies are ignored, the service reports **OK** with an explicit summary. If no policies are returned, the service reports **UNKNOWN**. ### Connection settings The request timeout is configurable. SSL certificate verification is enabled by default and can be explicitly disabled in the special agent rule. ## Discovered labels * Cluster hosts: `rubrikDevice:cluster` * Node hosts: `rubrikDevice:node` ## Checkmk version compatibility **Compatibility:** Checkmk 2.3–2.5. Successfully tested with Checkmk 2.5.0. Earlier packages: * Checkmk 2.1.0: `rubrik_agent-0.9.3.mkp` (deprecated) * Checkmk 2.2.0: `rubrik_agent-1.2.3.mkp` * Checkmk 2.3.0 and 2.4.0 with instance-based CDM: `rubrik_agent-1.4.3.mkp` * Checkmk 2.3.0 and 2.4.0 with cloud-based RSC: `rubrik_agent-1.5.7.mkp` ## Thanks! Thanks to my colleague Mathias for his helpful suggestions and support in keeping the code clean. Thanks to **Leon Buhleier** ([Leon.Buhleier@sva.de](mailto:Leon.Buhleier@sva.de)) for contributing the metric translation fix for correct scaling of Rubrik Disk graphs. Thanks to **Sebastian Häger** ([Sebastian.Haeger@sva.de](mailto:Sebastian.Haeger@sva.de)) for contributing version 1.5.3: Event Logwatch with filters, configurable request timeout, and SaaS-wide cluster monitoring with cluster piggyback hosts. ## Changelog * 0\.1.0 Initial version \[ ... \] * 1\.4.3-p1 Fixed Rubrik Disk graph scaling with filesystem metric translation, contributed by Leon Buhleier ([Leon.Buhleier@sva.de](mailto:Leon.Buhleier@sva.de)) * 1\.5.0 Switched the Rubrik special agent to RSC GraphQL-only mode, added mandatory cluster selection by cluster name or UUID, added secure password-store secret resolution, ensured RSC session tokens are deleted after use, enabled SSL certificate verification by default with explicit opt-out support, fixed degraded disk mapping for raidStatus values NONE and OPTIMAL, improved Node Hardware Health policy details, and fixed singleton section parsing for duplicate piggyback sources. * 1\.5.1 Added Rubrik Bandwidth check * 1\.5.2 Fixed the section list in the special agent rule * 1\.5.3 Added Event Logwatch with filters, configurable request timeout, and SaaS-wide cluster monitoring with cluster piggyback hosts, contributed by Sebastian Häger ([Sebastian.Haeger@sva.de](mailto:Sebastian.Haeger@sva.de)) * 1\.5.4 Code optimization and bug fixes * 1\.5.5 Fixed bandwidth query, restored Storage section selection with UNKNOWN handling for missing runway data, and hardened event handling with required filters and temporary state storage. * 1\.5.6 Added selectable hardware health policy exceptions (Ignore/OK/WARN/CRIT), preserved monitoring of other components, and clarified Event Logwatch filter requirements. * 1\.5.7 Fixed Event Logwatch state isolation by querying host and cluster UUID, including SaaS cluster switching.
by FrankB (SWR)
Labelpicker NG ist eine umfassende Neuentwicklung des beliebten Labelpicker-Tools, optimiert für aktuelle Checkmk-Versionen und maximale Flexibilität. Durch eine komplett modularisierte Architektur und validierte YAML-Konfigurationen lassen sich Host-Labels nun noch zuverlässiger aus verschiedensten Datenquellen wie Active Directory, CSV oder dem Hardware/Software-Inventory generieren. Besonders hervorzuheben ist das neue `hwswtreeapi`\-Plugin, das Inventardaten robust über die Checkmk-API statt aus lokalen Dateien abruft. Ein überarbeitetes Logging sowie ein intelligenter Cleanup-Mechanismus via Pickle-History sorgen für Transparenz und saubere Datenbestände. Damit fügt sich Labelpicker NG nahtlos als professionelle Automatisierungslösung in jede Checkmk-Umgebung ein. * **API-basierte Inventory-Auswertung:** Das neue `hwswtreeapi`\-Plugin bezieht Hardware-/Software-Daten direkt über die Checkmk-API, was die Stabilität erhöht und verteilte Umgebungen optimal unterstützt. (Getestet mit Checkmk 2.4) * **Active Directory Integration:** Ein neues Plugin ermöglicht es, Checkmk-Labels dynamisch basierend auf AD-Gruppenmitgliedschaften zu setzen (z. B. für Patch-Management oder Downtimes). * **Robuste Konfiguration & Validierung:** Dank Pydantic werden Fehler in der zentralen YAML-Konfiguration sofort erkannt und mit präziser Angabe der Fundstelle gemeldet. * **Intelligentes Lifecycle-Management:** Ein neuer Retention-Mechanismus speichert gesetzte Labels in einer Historie, um nicht mehr gültige Labels bei Folgeläufen sauber und gezielt wieder zu entfernen. * **Erweitertes Logging & Debugging:** Das Logging wurde komplett überarbeitet und erlaubt nun getrennte Log-Levels für Konsole und Datei, um Fehleranalysen ohne „Noise“ durchzuführen. * **Gezieltes entfernen eines Labels:** Es wurde der Schalter `--remove` eingeführt um Labels aus Checkmk zu entfernen. * **Release 1.0.1** (feature complete): Für `hwswtreeapi` wird nun keine extra Checkmk-Konfiguration/Zugangsdaten mehr benötigt. * **Release 2.1.1** (bugfix release) Strip the .json suffix when deriving hostnames from inventory files & Merge labels per host so later data sources preserve labels from earlier sources.
LinOTP two-factor authentication server monitoring via its API - token counts and per-resolver user counts per realm with configurable levels, storage encryption, config sync, and license & support status including LinOTP's grace-limit message.
Citrix XenServer and XCP-ng monitoring via the XAPI management API (read-only special agent, no agent on the hypervisors) — pool members and HA, alerts, storage repositories (capacity, I/O, attach state, multipath), plus piggyback data per hypervisor host (CPU, memory, interfaces, license, updates, certificates) and per VM (power state, CPU, memory, disks, NICs, snapshots, guest tools).
Checkmk MKP that monitors OPNsense firewalls through the OPNsense REST API. Not an replacement for the checkmk agent, but an addition.
by rsander
Agent Plugin to check SSL certificates in specified directories Now with support to check signature algorithm Windows Plugin added JSON data in agent data section Is now able to ignore certificates with a short lifetime
by simonmeggle
Robotmk integrates Robot Framework results into Checkmk.
by lgbff
This check monitors the status of ssl cert checks on ssllab.com. Changelog: - 3\.2.0 no systemtime in agent output - 3\.x version for cmk 2.2 - 2\.1.0 change to python3 - 2\.0.1 fix datasource\_programm group definition - 2\.0.0 insert cache for api response - 1\.6.0 insert Agent status (line\[3\]) - 1\.5.3 change default status - 1\.5.2 Insert Agent Header infos - 1\.5.1 cache default settings - 1\.5.0 new data seperator (59) - 1\.4.9 fix display JSON Error on check result. - 1\.4.8 fix connect exeption - 1\.4.7 add default value for timeout - 1\.4.6 change timeout handling - 1\.4.5 fix inventory issue while JSON issues - 1\.4.4 change urlopen error handling - 1\.4.3 Rename check file - 1\.4.2 Fix check manpage - 1\.4.1 delete modul calls from check - 1\.4.0 changes for cmk version 1.4 - 1\.3.1 improve error handling.
by rsander
Plugin to gather Ceph statistics. ### Starting with Checkmk 2.4, this plug-in is distributed with Checkmk. No need to download this MKP. Use this MKP only if you want to monitor Ceph with Checkmk 2.2 or 2.3.