Monitor ArcGIS Enterprise components for available patches on Windows hosts.

The agent plugin runs directly on each ArcGIS host, discovers installed components from the Windows registry, and compares applied patch QFE_IDs against Esri's patch notification feed. One service per component, no manual configuration of what is installed.

What it monitors

• ArcGIS Server, Portal, and Data Store - patch status via QFE_ID comparison against Esri's feed
• Security patches - immediate CRIT on any missing security patch, regardless of thresholds
• Non-critical patches - configurable WARN when patches are available
• Overdue patches - configurable CRIT when the oldest unapplied patch exceeds an age threshold

Highlights

• Auto-discovery via Esri's QFEPatchFinder and QFEARP registry markers - no manual component list
• QFE prefix auto-detection from applied patches - works for any Esri product without hardcoding
• Patch feed cached locally - survives feed outages with stale cache fallback
• Configurable feed URL for internal mirrors and air-gapped environments
• Agent Bakery deployment with per-host feed and cache configuration
• Service monitoring rule for per-host and per-component threshold tuning

Requirements

• ArcGIS Enterprise 11.1+ (may work on earlier versions but untested)
• Checkmk 2.3.0p1+
• Windows host with ArcGIS Enterprise components installed

Full documentation, installation guide, and community contribution instructions for unverified components: https://github.com/turretsec/cmk-arcgis-updates