[checkmk-commits] #1318 cisco_asa_svcsessions: New Check to monitor VPN Connections on Cisco ASA devices

Module: check_mk Branch: master Commit: 96f30104fbfe787445e8be507d3e7107201cf17a URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=96f30104fbfe78… Author: Bastian Kuhn &lt;bk(a)mathias-kettner.de&gt; Date: Thu Dec 17 15:02:44 2015 +0100 #1318 cisco_asa_svcsessions: New Check to monitor VPN Connections on Cisco ASA devices --- .werks/1318 | 9 ++++++ ChangeLog | 1 + checkman/cisco_asa_svcsessions | 13 ++++++++ checks/cisco_asa_svcsessions | 58 ++++++++++++++++++++++++++++++++++ web/plugins/wato/check_parameters.py | 15 +++++++++ 5 files changed, 96 insertions(+) diff --git a/.werks/1318 b/.werks/1318 new file mode 100644 index 0000000..7176583 --- /dev/null +++ b/.werks/1318 @@ -0,0 +1,9 @@ +Title: cisco_asa_svcsessions: New Check to monitor VPN Connections on Cisco ASA devices +Level: 1 +Component: checks +Compatible: compat +Version: 1.2.7i4 +Date: 1450360935 +Class: feature + + diff --git a/ChangeLog b/ChangeLog index e779401..aa75dc6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -68,6 +68,7 @@ * 2816 check_mail_loop: now supports STARTTLS for IMAP authentification * 2817 cmc_temp: New temperature check for Rittal devices using the CMC MIB * 1600 check_mk_agent.linux: Diskstat Sektion now supports s390 DASDs (zLinux on IBM Mainframes) + * 1318 cisco_asa_svcsessions: New Check to monitor VPN Connections on Cisco ASA devices * 2660 FIX: fixed windows agent using the wrong working directory... * 2664 FIX: ps: Speedup in situation with many matching processes... * 2661 FIX: windows agent: fixed incomplete process list... diff --git a/checkman/cisco_asa_svcsessions b/checkman/cisco_asa_svcsessions new file mode 100644 index 0000000..4cae9c4 --- /dev/null +++ b/checkman/cisco_asa_svcsessions @@ -0,0 +1,13 @@ +title: Citrix ASA SVC Sessions (SSL VPN Client) +agents: snmp +catalog: hw/network/cisco +distribution: check_mk +license: GPLv3 +description: + This check monitors the number of active Sessions VPN Sessions (e.g. Anyconnect) on a citrix server. + +inventory: + One service will be created. + +perfdata: + One graph will be created diff --git a/checks/cisco_asa_svcsessions b/checks/cisco_asa_svcsessions new file mode 100644 index 0000000..55fa6b3 --- /dev/null +++ b/checks/cisco_asa_svcsessions @@ -0,0 +1,58 @@ +#!/usr/bin/python +# -*- encoding: utf-8; py-indent-offset: 4 -*- +# +------------------------------------------------------------------+ +# | ____ _ _ __ __ _ __ | +# | / ___| |__ ___ ___| | __ | \/ | |/ / | +# | | | | '_ \ / _ \/ __| |/ / | |\/| | ' / | +# | | |___| | | | __/ (__| < | | | | . \ | +# | \____|_| |_|\___|\___|_|\_\___|_| |_|_|\_\ | +# | | +# | Copyright Mathias Kettner 2014 mk(a)mathias-kettner.de | +# +------------------------------------------------------------------+ +# +# This file is part of Check_MK. +# The official homepage is at http://mathias-kettner.de/check_mk. +# +# check_mk is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by +# the Free Software Foundation in version 2. check_mk is distributed +# in the hope that it will be useful, but WITHOUT ANY WARRANTY; with- +# out even the implied warranty of MERCHANTABILITY or FITNESS FOR A +# PARTICULAR PURPOSE. See the GNU General Public License for more de- +# ails. You should have received a copy of the GNU General Public +# License along with GNU Make; see the file COPYING. If not, write +# to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, +# Boston, MA 02110-1301 USA. + +# 1.3.6.1.4.1.9.9.392.1.3.35.0 crasSVCNumSessions +# The number of currently active SVC sessions. + +cisco_asa_svc_default_levels = ( 20, 25 ) + +def inventory_cisco_asa_svcsessions(info): + return [ (None, "cisco_asa_svc_default_levels") ] + + +def check_cisco_asa_svcsessions(_no_item, params, info): + num_sessions = int(info[0][0]) + warn, crit = params + perfdata = [("active", num_sessions, warn, crit )] + message = "Currently %d Sessions" % num_sessions + levels = " (Warn/ Crit at %d/%d)" % ( warn, crit) + if num_sessions >= crit: + return 2, message + levels, perfdata + elif num_sessions >= warn: + return 1, message + levels, perfdata + else: + return 0, message, perfdata + +check_info["cisco_asa_svcsessions"] = { + "check_function" : check_cisco_asa_svcsessions, + "inventory_function" : inventory_cisco_asa_svcsessions, + "service_description": "SVC Sessions", + "has_perfdata" : True, + "snmp_scan_function" : lambda oid: oid(".1.3.6.1.2.1.1.1.0").lower().startswith("cisco adaptive security") \ + or "cisco pix security" in oid(".1.3.6.1.2.1.1.1.0").lower(), + "snmp_info" : (".1.3.6.1.4.1.9.9.392.1.3", [ 35 ]), + "group" : "asa_svc_sessions", +} diff --git a/web/plugins/wato/check_parameters.py b/web/plugins/wato/check_parameters.py index 1c7898b..ca6d71b 100644 --- a/web/plugins/wato/check_parameters.py +++ b/web/plugins/wato/check_parameters.py @@ -5858,6 +5858,21 @@ register_check_parameters( match_type = "dict", ) +register_check_parameters( + subgroup_applications, + "asa_svc_sessions", + _("Cisco SSl VPN Client Sessions"), + Tuple( + title = _("Number of active sessions"), + help = _("This check monitors the current number of active sessions"), + elements = [ + Integer(title = _("Warning at"), unit = _("sessions"), default_value = 100), + Integer(title = _("Critical at"), unit = _("sessions"), default_value = 200), + ], + ), + None, + match_type = "first", +) register_check_parameters( subgroup_applications,