You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+44-22Lines changed: 44 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,9 +6,10 @@ The Microsoft Entra Special Agent can be integrated into Checkmk 2.3 or newer.
6
6
You can download the .mkp file from releases in this repository to upload it directly to your Checkmk site.
7
7
8
8
The Plugin provides monitoring of these components:
9
-
- Microsoft Entra connect/cloud sync
10
-
- Microsoft Entra app registration credentials
11
-
- Microsoft Entra SAML certificates
9
+
- Microsoft Entra App Registration Credentials
10
+
- Microsoft Entra CA VPN Certificate
11
+
- Microsoft Entra Connect/Cloud Sync
12
+
- Microsoft Entra SAML Certificates
12
13
13
14
## Prerequisites
14
15
@@ -26,54 +27,75 @@ You will need the Microsoft Entra Tenant ID, the Microsoft Entra App Registratio
26
27
When you configure the Special Agent, you have the option to select only the services that you want to monitor. You do not have to implement all the checks, but at least one of them.
27
28
28
29
## Check Details
29
-
### Microsoft Entra connect/cloud sync
30
+
31
+
### Microsoft Entra App Registration Credentials
30
32
31
33
#### Description
32
34
33
-
This check monitors the time since the last Entra connect/cloud synchronisation.
35
+
This check monitors the expiration time of secrets and certificates from Entra app registrations.
1.**Time since last sync**: Specify the upper levels for the last sync time from Microsoft Entra connect/cloud sync. The default values are 1 hour (WARN) and 3 hours (CRIT). To ignore the last sync time, select 'No levels'.
43
+
1.**Credential Expiration**: Specify the lower levels for the Microsoft Entra app credential expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the credential expiration, select 'No levels'.
44
+
2.**Exclude Credentials**: Specify a list of credential descriptions that you do not want to monitor.
42
45
43
46
#### Microsoft Graph API
44
47
45
-
**API permissions**: At least *Organization.Read.All* (Application permission)
1.**Credential expiration**: Specify the lower levels for the Microsoft Entra app credential expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the credential expiration, select 'No levels'.
62
-
2.**Exclude credentials**: Specify a list of credential descriptions that you do not want to monitor.
64
+
1.**Certificate Expiration**: Specify the lower levels for the Microsoft Entra Conditional Access VPN certificate expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the certificate expiration, select 'No levels'.
63
65
64
66
#### Microsoft Graph API
65
67
66
-
**API permissions**: At least *Application.Read.All* (Application permission)
68
+
**API Permissions**: At least *Application.Read.All* (Application permission)
1.**Time since last sync**: Specify the upper levels for the last sync time from Microsoft Entra Connect/Cloud Sync. The default values are 1 hour (WARN) and 3 hours (CRIT). To ignore the last sync time, select 'No levels'.
85
+
86
+
#### Microsoft Graph API
87
+
88
+
**API Permissions**: At least *Organization.Read.All* (Application permission)
0 commit comments