Checkmk notification plugin for Freshservice. Automatically creates or updates Freshservice tickets based on the state transitions of host and service notifications. It is not perfect, but it works. Recommendation for payload mapping within Freshservice webhook: Subject > subject; Description > description; Node > object_type; Metric name > metric_name; Metric value > metric_value (for Action URL, else "perf_data"); Resource > hostname; Severity > severity; Created on > event_date; Aggregation > Resource + Metric name With this mapping you'll see the Event summary within the subject of the alarm and the created ticket and the state change of the host/service within the description. If you want it to behave like within mail notifications, you can swap the mapping to Subect > description and Description > subject, but personally I prefer it like mentioned above. When the base Checkmk URL is provided, the script generates a link to the alert page. I mapped this link to the Metric Value in Freshservice because the perf_data is rather hard to read without accessing the Checkmk API, and I felt the link would be more useful there. **Changelog: ** Version 1.1.0: Changed the Auth key parameter from string to more robust and secure password-function.
Written for Aruba ClearPass Monitoring. Based on "Clearpass API Monitoring" originally created by Benjamin Hoch at pronexon GmbH (https://exchange.checkmk.com/p/checkmk-mkp-clearpass) My version (2.4.0) cleaned the code a bit and added monitoring for the last 20 log lines of all discovered ClearPass extensions. I did this, because I've found out that some extensions may be in a running state, but won't function in the correct way, because there are unresolved erros within the log file which need attention and/or a extension restart. Version 2.5.0 added check functionality for the CA Trust List. SETUP: 1. create clearpass api user: - navigate to the clearpass server via browser and login - ClearPass Guest > Administration > API Services > API Clients > Create API client (Operating mode > ClearPass REST API; Grant Types > client_credentials; Operator Profile > Read-only Administrator) 2. api documentation: - https://developer.arubanetworks.com/aruba-cppm/reference/tokenendpointpost 3. Integration: - Configure API credentials under Setup > Agents > Other integrations > Aruba ClearPass 4. Host configuration: - Monitoring agents > Checkmk agent /API integrations > Configured API integrations **Changelog: ** Version 2.5.0: Added monitoring checks for the CA trust list, no more anger with expired intermediate or root certificates.
Plugin monitors installed Sophos certificates for their validity via the Sophos XML API. Built-in ruleset for WARN/CRIT values. All data is processed within the RAM, Private Keys are always ignored for security, per-user-certificates are ignored by default. SETUP: 1. create sophos profile, api user and configure api access: - log on to firewall - System > Profiles > Device access > Add: create new profile (i. e. Profile name "API admin" with Read-write permissions for "Objects", "Network" ("Download certificates" and "Other certificate configuration") - Configure > Authentication > Users > Add: new user (i. E. named "checkmk"), User type "Administrator" and give him the profile added before - System > Administration > API access > activate API access and add your Checkmk as IP host to the list, hit apply 2. api documentation: - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/API/APIAllowAccess/index.html - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/API/APIConfiguration/index.html - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Certificates/HowToArticles/CertificatesAPIGetCertificate/index.html 3. Integration: - Configure API credentials under Setup > Agents > Other integrations > Sophos XGS Certificates 4. Host configuration: - Monitoring agents > Checkmk agent /API integrations > Configured API integrations
Monitors the alerts within Microsoft Defender for Cloud. SETUP: Microsoft Entra Configuration Register an Application Sign in to the Microsoft Entra Admin Center (https://entra.microsoft.com) as a Global Administrator (or at least a Privileged Role Administrator) Browse to Identity > Applications > App registrations Select New registration Provide a meaningful name (e.g. "Checkmk Special Agent") Select Accounts in this organizational directory only Do not specify a Redirect URI Click Register Save Application (Client) ID and Directory (tenant) ID vor later. Configure the Application Go to API permissions Click Add a permission > Microsoft Graph > Application permissions Add API permissions SecurityAlert.Read.All Select Grant admin consent > Yes Go to Certificates & secrets and click New client secret Enter a description (e.g. the Checkmk Site name) and select an expiration period for the secret Save Client secret for later Checkmk Special Agent Configuration Log in to your Checkmk site Add a New Password Browse to Setup > Passwords Select Add password Specify a Unique ID and a Title Copy the generated secret from the Microsoft Entra Admin Center to the Password field Click Save Add Checkmk Host Add a new host in Setup > Hosts Configure your custom settings and set IP address family: No IP Checkmk agent / API integrations: API integrations if configured, else Checkmk agent Save Add Special Agent Rule Navigate to the Special Agent rule Setup > Microsoft Defender Alerts (use the search bar) Add a new rule and configure the required settings Application (client) ID and Directory (tenant) ID from the Microsoft Entra Application For Client Secret select From password store and the password from Add a New Password Add the newly created host in Explicit hosts Save and go to your new host and discover your new service Activate the changes