Written for Aruba ClearPass Monitoring. Based on "Clearpass API Monitoring" originally created by Benjamin Hoch at pronexon GmbH (https://exchange.checkmk.com/p/checkmk-mkp-clearpass)

My version (2.4.0) cleaned the code a bit and added monitoring for the last 20 log lines of all discovered ClearPass extensions. I did this, because I've found out that some extensions may be in a running state, but won't function in the correct way, because there are unresolved erros within the log file which need attention and/or a extension restart. Version 2.5.0 added check functionality for the CA Trust List.

SETUP:

1. create clearpass api user:

   • navigate to the clearpass server via browser and login
   • ClearPass Guest > Administration > API Services > API Clients > Create API client (Operating mode > ClearPass REST API; Grant Types > client_credentials; Operator Profile > Read-only Administrator)
     
     

2. api documentation:

   • https://developer.arubanetworks.com/aruba-cppm/reference/tokenendpointpost
     
     

3. Integration:

   • Configure API credentials under Setup > Agents > Other integrations > Aruba ClearPass
     
     

4. Host configuration:

   • Monitoring agents > Checkmk agent /API integrations > Configured API integrations
     
     

**Changelog: **

Version 2.5.0:
Added monitoring checks for the CA trust list, no more anger with expired intermediate or root certificates.