Windows Update check

Service Monitoring
1

Hello,

We currently use the standard Windows Update check, which generates a warning when 8 updates are pending and a critical alert when 10 updates are pending.

In addition, I would like to create a separate check that only triggers a warning or critical alert if the system has not installed any Windows updates for more than 100 days.

I was thinking of setting the threshold interval to 100 days. That way, the check would only generate a warning or critical alert if no Windows updates have been installed within the last 100 days.

2

At least in the linux server world i am doing a check_uptime, to notify me when there hasnt been a kernel update for quite some time.

3

Here is the documentation of the check:
Invoke-IcingaCheckUpdates

As you can see there is no Parameter to check for that.

But the windows eventlog can help with the task:

PS C:\WINDOWS\system32> Invoke-IcingaCheckEventlog `
   -LogName 'System' `
   -IncludeSource @('Microsoft-Windows-WindowsUpdateClient') ` 
   -IncludeEventId @(19) `
   -After '100d' `
   -DisableTimeCache `
   -Critical '@0:0' `
   -Verbosity 2

If you use Icinga director don’t use the @() or '' as the powershell director config should take care of that.

@0:0 means that only 0 is critical so the check alerts only if the query returns 0 update events

This should work but currently doesn’t work as expected see here.

4

Thank you for the post! This is possible as of today, we fixed the EventLog behavior with v1.15.0