Windows Update Check for CheckMK

Hi CheckMK Community,

as part of our Community work, we are publishing our PowerShell written Windows Update Check now as Open Source Plugin for everyone.
It is completely new written and you can set all kind of warn and crit levels for your Windows Updates.
We have this Check Running since 2023 on all kind of Windows Systems, now feel free to use it too.
We tried to remove our OEM Branding for the end Users as good as possible.

Have fun!

Github Repo:

#Powered by K&P Computer - www.kpc.de


Available .mkp Package Releases:

CheckMK Exchange:

https://exchange.checkmk.com/p/kpc-windows-updates


Windows Update Checks for CheckMK

Features:

  • Check for available Windows Updates (Important and Optional, intelligence updates will be shown under optional updates)
  • Checking for available Windows Updates sorted by Severity
  • Individual WARN/CRIT Level settings for each type of Updates (Mandatory, Critical, Important, Moderate, Low, Unspecified Severity)
  • Pending Reboot Check after Update Installation with WARN/CRIT Level Settings
  • CRIT Error if Update Search does not work for a while (Windows update not activated, WSUS Problem etc…)
  • Showing all available Updates in Detailed Summary
  • Check for Windows Update History. Shows the last time when this System installed an Windows Update and also the List of up to the last 80 installed updates in the summary details. (Intelligence Updates are excepted)
  • Warn/Crit level Settings if the System did not install any update during the last X days.
  • Included in Agent Rules for Agent bakery
  • No VBS Scripts anymore, only Powershell will be used
  • Tested with Windows 2012R2/2016/2019/2022

Added default Agent execution Settings for the Windows Agent Plugin (Agent Bakery):

  • Default cache interval of 3 Hours
  • Default asynchronous execution
  • Default execution timeout of 1 hour (long time needet for some older systems sometimes)

If you are not using the CheckMK agent bakery or if you are working with CheckMK Raw Edition, apply the following Settings to your check_cmk.user.yml

%ProgramData%\checkmk\agent\check_mk.user.yml

plugins:
    enabled: yes
    execution:
    - pattern     : '$CUSTOM_PLUGINS_PATH$\windows_updates_kpc.ps1'
      async       : yes
      run         : yes
      cache_age   : 3600
      timeout     : 3600

Screenshots:

image

image

image

4 Likes

The file header currently states:

# Unauthorized copying of this file, via any medium is strictly prohibited
# Proprietary and confidential

do you want to change that to make this a proper release :slight_smile: ?

Yes, i changed it everywhere to GPL i guess… :smiley:

2 Likes

Buenas,
¿Cómo puedo descargar el archivo powershell? Imagino que sin ese powershell, aunque instale y habite el mkp, no funcionará.
Gracias.

@Aurex, pardon, Sólo hablo un poco de español:

Muchas gracias. Se agradece tu esfuerzo.

Ya lo tengo funcionando.

1 Like