APT updates sometimes missing

To know where your problem lies the complete error message would be helpful.
You can get it with “cmk --debug -vvn hostname” on the command line for your host with the shown output on your monitoring system.

This will no one use in a production environment. With only “upgrade” you should also get the kernel patches, only no complete new kernel versions.