Fragen zu Azure Anbindung

Hi an die Azure Experten :smiley:

Wir nutzen cee 2.4.0p15 und sind gerade dabei, eine Azure-Umgebung an checkmk anzubinden. Generell funktioniert offenbar auch die Abfrage durch checkmk. Wir sind allerdings mit den ressource groups und ressources etwas überfragt.

Wir haben in der Azure-Rule folgendes ausgewählt:

Über den DCD legt checkmk danach automatisch folgende Hosts/Ressource Groups an:

image

Soweit so gut, dies sind auch alle RGs die wir haben.

Allerdings finden wir danach unterhalb von z.B. rg-w365-test-gwc nur die folgende Ressource:

Neben vpngw-w365-test-gwc-01 gibt es aber noch mehr Ressourcen, z.B.
natgw-w365-test-gwc-01
vnet-w365-test-gwc

Warum werden diese Ressourcen nicht angezeigt?

Kann hier irgendjemand weiterhelfen?
Danke!
Christian

Ergänzend, also wir wollen diese Ressourcen überwachen:

VPN Gateway: [Monitor Azure VPN Gateway | Microsoft Learn|https://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway\]

NAT Gateway: [Monitor Azure NAT Gateway | Microsoft Learn|https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway\]

VNET: [Monitor Azure Virtual Network | Microsoft Learn|https://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network\]

NSG: [NSG Flow Logs Overview - Azure Network Watcher | Microsoft Learn|NSG Flow Logs Overview - Azure Network Watcher | Microsoft Learn]

Kann es sein, dass checkmk davon wirklich nur das VNET supportet? Wie könnte man in diesem Fall die anderen Ressourcen monitoren?

VG

Hey @Sara :slight_smile:

Could you possibly check internally whether we have a problem with the feature set of the checkmk Azure monitoring or whether it is more likely to be a problem on our end?

This would be very helpful!
Christian


original Post in english:

Hi Azure experts
We are using cee 2.4.0p15 and are currently in the process of connecting an Azure environment to checkmk. In general, the query by checkmk seems to be working. However, we are a little overwhelmed by the resource groups and resources.
We have selected the following in the Azure rule:

Checkmk then automatically creates the following hosts/resource groups via the DCD:

image

So far, so good; these are all the RGs we have.
However, below rg-w365-test-gwc, for example, we only find the following resource:

In addition to vpngw-w365-test-gwc-01, there are other resources, e.g.
natgw-w365-test-gwc-01
vnet-w365-test-gwc

Why are these resources not displayed?

In general, we want to monitor these resources:

VPN Gateway: [Monitor Azure VPN Gateway | Microsoft Learn|https://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway\]

NAT Gateway: [Monitor Azure NAT Gateway | Microsoft Learn|https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway\]

VNET: [Monitor Azure Virtual Network | Microsoft Learn|https://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network\]

NSG: [NSG Flow Logs Overview - Azure Network Watcher | Microsoft Learn|NSG Flow Logs Overview - Azure Network Watcher | Microsoft Learn]

Could it be that checkmk really only supports the VNET? In this case, how could the other resources be monitored?

Can anyone help here?

Thanks!
Christian

Hi CFriedrich,

The Azure resources currently supported in monitoring are the ones listed under ‘Available’ in the special agent configuration shown in the screenshot. From the list that you shared, only the NAT Gateway resource is currently planned. We will add more Azure resource coverage in the future.

Best,
Saleh

2 Likes

Hi @MSaleh :slight_smile:

Thank you very much for answering my question.

Good news regarding the NAT Gateway. From our perspective, it would be great if the other resources could also be integrated into Checkmk monitoring (of course :grinning_face: ). We need to ensure monitoring of our Azure infrastructure by March 2026.

Could you let us know in which release the monitoring for the NAT Gateway will be available?

Regards

Christian

Hi @CFriedrich ,

You are most welcome!

Monitoring of Azure NAT Gateway is currently planned for Checkmk 2.5 :slight_smile: for fresh updates on the development you can follow the topic on the Ideas Portal

https://ideas.checkmk.com/suggestions/557677/azure-nat-gateway-monitoring

Best,
Saleh

1 Like

@MSaleh

One last question. We are currently using the Enterprise Edition. This allows us to monitor the VNET gateways at the moment. Is the new NAT gateway feature only being developed for the Cloud Edition? You wrote something along those lines on the Ideas Portal.

Best regards

Yes, that is correct. NAT Gateway monitoring will be a Cloud edition feature.