Linux Process Monitoring

[nvnbs (v n bhavanishankar N)]

Hi,

We are trying to monitor specific linux processess in check_mk. something like this:
Service Name :- cisco-amp.service

Service Display Name :- Cisco AMP for Endpoints daemon

How can i enable this

[ChristianM (Christian Michaelski)]

Hi,
you can use Process disvery rule plus “state and count of process” rule or Enforced/Manual Services “state and count of processes” rule.

Cheers,
Christian

[nvnbs (v n bhavanishankar N)]

I have created something like this

[ChristianM (Christian Michaelski)]

Looks good. Now do a discovery. If you get no new service, please check if process name is correct.
Cheers,
Christian

[r.sander (Robert Sander)]

@nvnbs

cisco-amp.service

This is not a process but a systemd service unit.

If you want to monitor this you need to use the ruleset Systemd Single Service Discocery.

[nvnbs (v n bhavanishankar N)]

i created this but no luck

[bmst]

You also need to check states and enable at least one (probably active & failed - possibly inactive) for the systemd services to be discoverable, IIRC

[nvnbs (v n bhavanishankar N)]

added these but still no luck

[bmst]

Are you getting systemd reporting at all? Download the agent output (under the burger menu on the Check_MK service) and search through it for your service name? Do you have a 1.6 version of the agent on this host?

And actually now that I think about it, I’m not sure that service unit name supports wildcards or regexes, try just “cisco-amp” (I have multiple versions of software-12, software-13, etc in mine, and I’m pretty sure I would’ve wildcarded it if it worked).

[nvnbs (v n bhavanishankar N)]

Thanks after giving the exact name it is working without any wildcards.

I have a requirement to monitor tanium process i have created the same rule without wild cards but for some reason it is not working