Written for Aruba ClearPass Monitoring. Based on "Clearpass API Monitoring" originally created by Benjamin Hoch at pronexon GmbH (https://exchange.checkmk.com/p/checkmk-mkp-clearpass)
My version (2.4.0) cleaned the code a bit and added monitoring for the last 20 log lines of
all discovered ClearPass extensions. I did this, because I've found out that some extensions may be in a running state, but won't function in the correct way, because there are unresolved erros within the log file which need attention and/or a extension restart. Version 2.5.0 added check functionality for the CA Trust List.

SETUP:

1. create clearpass api user:

   • navigate to the clearpass server via browser and login
   • ClearPass Guest > Administration > API Services > API Clients > Create API client (Operating mode > ClearPass REST API; Grant Types > client_credentials; Operator Profile > Read-only Administrator)

2. api documentation:

   • https://developer.arubanetworks.com/aruba-cppm/reference/tokenendpointpost

3. Integration:

   • Configure API credentials under Setup > Agents > Other integrations > Aruba ClearPass

4. Host configuration:

   • Monitoring agents > Checkmk agent /API integrations > Configured API integrations

**Changelog: **
Version 2.5.0: Added monitoring checks for the CA trust list, no more anger with expired intermediate or root certificates.