Checks

A check is an automated test that an octoja agent runs on a device at regular intervals. Each check monitors a specific condition — disk space, service ...

Written By Erdinc Akay

Last updated 8 days ago

A check is an automated test that an octoja agent runs on a device at regular intervals. Each check monitors a specific condition — disk space, service state, network reachability, backup status — and reports the result back to the platform. A few checks, such as Device online, are evaluated on the server side instead of by the agent.

How checks work

Check types come from check repositories and are listed in the Check Library under Configuration → Check Library. When you add a check to a device or Software Deployment, the agent downloads the check definition and begins running it on the configured schedule.

The library is filled from three kinds of repository: the built-in official repository octoja maintains, your own custom checks, and any community repositories you connect by URL to bring in extra checks. See Connect a Community Check Repository and the Check Repository Reference for details.

Available check types

octoja ships a catalogue of built-in check types across four categories. Alongside the generic Antivirus Status check, there are dedicated checks for specific antivirus vendors, UniFi SNMP device checks, and a System Updates check. The full set is listed below.

Hardware

Check	What it monitors
APC UPS	UPS battery level, load, and runtime via SNMP
CPU Load	CPU utilisation across all cores
Crash Detection	Blue-screen (BSOD) and kernel panic events
Disk I/O	Disk throughput and I/O bottleneck detection
Disk Space	Drive space usage per volume
Folder Size	Size of a specific folder on disk
HP iLO	Server hardware health via HP iLO interface
Fujitsu ServerView Health (SNMP)	Server hardware health on Fujitsu PRIMERGY servers via SNMP
Power Status	Whether the system is running on mains or battery power
QNAP NAS	Health and status of QNAP NAS devices
RAID Status	RAID array health and degradation
RAM Load	Memory utilisation and availability
SMART Disk Health	Physical drive health via S.M.A.R.T. attributes
Synology NAS	Health and status of Synology NAS devices

Network

Check	What it monitors
Bandwidth	Network throughput and interface saturation
Device online	Whether the device is currently reachable, evaluated on the server from the live connection state
HTTP Content Check	HTTP response content and availability
Network Firewall (Appliance)	Network firewall appliance status and rule health
Network Interface	Network adapter status and traffic
NTP Sync	System clock synchronisation with NTP servers
Ping	Network reachability, latency, and packet loss to a target host
TCP Connections	TCP port connectivity and response
UniFi (SNMP)	Ubiquiti UniFi switches, gateways, and access points via SNMP — reachability, CPU, RAM, temperature, interfaces, and PoE budget
UniFi Access Point (SNMP)	A UniFi access point via SNMP — reachability, firmware, uptime, and connected clients per radio
UniFi Switch (SNMP)	A UniFi switch via SNMP — reachability, firmware, CPU, RAM, temperature, fans, and port up/down summary

Security

Check	What it monitors
Antivirus Status	Whether antivirus protection is active and up to date
Bitdefender Protection	Local Bitdefender Endpoint Security health: agent, definitions, real-time protection, and quarantine
ESET Security	Local ESET Endpoint/Server Security health via ESET's eRmm interface: protection modules, real-time protection, signature age, and active detections
G DATA Antivirus	G DATA Security Client health: services, real-time protection, signature age, and recent detections
Lywand Vulnerabilities	Lywand vulnerability findings and risk score for the device
Securepoint Antivirus Pro	Local Securepoint Antivirus Pro health: the GuardX service, real-time protection, signature age, quarantine, and active threats
SentinelOne Protection	Whether the SentinelOne agent is running, real-time protection is active, and there are no active threats
Sophos Antivirus	Local Sophos protection: core services, real-time protection, signature age, and quarantine
ThreatDown Protection	Local ThreatDown (Malwarebytes) health: agent, real-time protection, signature age, and quarantine
Firewall Status	Whether the system firewall is enabled
Password Policy	Local password policy compliance
SSL / HTTP	Website availability, HTTP status codes, and SSL certificate expiry
User Account Audit	Local user account audit (guest accounts, password age)
System Updates	Pending operating-system updates on Windows, Linux, and macOS

Services

Check	What it monitors
Cove Backup	Cove Data Protection backup job status and age
Custom Script	Runs your own monitoring script and evaluates the result
Docker Container	Container health, status, and restart count
Event Log	Windows Event Log errors exceeding a threshold
File Age	Whether a file has been updated recently
IIS App Pool	IIS application pool status
Hyper-V VM Status	Virtual machine status and health on Hyper-V hosts
Microsoft Hyper-V Host	Hyper-V host health — VMs, replicas, checkpoints, and storage
MailStore SPE User Count	MailStore Service Provider Edition (SPE) user count per instance via the SPE Management API (Windows only)
Process Monitor	Whether a specific process is running
Service Status	Whether a named system service is running
System Log	Linux/macOS system log monitoring
VMware (ESXi / vCenter)	VMware ESXi host, vCenter, and virtual machine health
Veeam Backup & Replication	Backup job status and age on Veeam Backup & Replication servers
Altaro Backup	Altaro / Hornetsecurity VM Backup results from the Windows event log
Acronis Backup	Acronis Cyber Protect agent state and last-backup age on Windows and macOS
Veeam Backup Agent	Veeam Agent for Windows backup results on an endpoint
Windows Backup	Windows Backup job status

Each check type has a dedicated reference article and a step-by-step configuration guide — see the Check Reference section in the sidebar.

Check outcomes

State	Meaning
OK	The monitored condition is within normal range
Warning	A threshold has been crossed but the situation is not yet critical
Critical	The condition requires immediate attention
Failure	The check ran but failed to execute or produce a result

Config packages

Rather than configuring checks one device at a time, you can use config packages to assign checks (and software deployments) to groups of devices based on rules.

Alerts

You can attach alert rules to a check so octoja notifies you when it keeps failing — through a webhook, Microsoft Teams, woasi, or as a case in octoja. A rule fires only when the check fails a set share of its recent runs (by default, half of the last ten), so a single blip stays quiet. Alert rules live on the check inside a config package, and an individual device can override the alarm configuration or have its alarms turned off while the check keeps running. Warning and Critical results are always surfaced on the device's Checks tab as well. See Set up alerts for a check.