# SAP BTP Subaccount - Built-in Checks

Here you will find detailed information about Built-in checks for SAP BTP Subaccount monitored objects.

Built-in checks are deployed automatically for a monitored object type. Once Avantra has detected a specific monitored object, each of the relevant built-in checks will be auto-deployed to the agent to begin check execution and status reporting. Built-in checks can be configured using Monitoring Parameters (e.g. to set threshold values) and can also be disabled if they are not relevant to your landscape.

This checks will only be available if Cloud Foundry is available, and authorization is there. See SAP BTP Subaccount for information on how to ensure Cloud Foundry is available.

## BTPDestinationCertificates

Description

This check monitors the SAP BTP Destination Certificates, and returns Warning and Critical check statuses when certificates are due to expire withing a defined amount of days. The check will also ignore expired certificates, if they have been expired for longer than a defined number of days.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | Daily
Depends on | N/A
Monitoring Parameters | : BTPDestCertsWarn, BTPDestCertsCrit, BTPDestCertsIgnoreExpiredCerts

## BTPCFOrgQuotaAppProcessInstances

Description

This check returns the current number of application process instances against the organization total instances quota, by listing all applications and the number of running instances. A Warning status can be returned if a stopped application would be prevented from starting a quota using CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota.

SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentWarn and SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentCrit monitoring parameters can be used to set Warning and Critical thresholds if process instances running in apps is above a set percentage of the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : CloudFoundryIncludeStoppedAppsInQuotaCalculation, CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota, SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentCrit, SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentWarn

## BTPCFOrgQuotaMemory

Description

This check returns the current usage of organization memory quota, by listing all applications and the current memory allocation. A Warning status can be returned if a stopped application would be prevented from starting a quota using CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota.

OrgQuotaMemoryMaxMemoryQuotaUsedPercentWarn and OrgQuotaMemoryMaxMemoryQuotaUsedPercentCrit monitoring parameters can be used to set Warning and Critical thresholds if total memory allocated to apps is above a set percentage of the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : CloudFoundryIncludeStoppedAppsInQuotaCalculation, CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota, OrgQuotaMemoryMaxMemoryQuotaUsedPercentCrit, OrgQuotaMemoryMaxMemoryQuotaUsedPercentWarn

## BTPCFOrgQuotaRoutes

Description

This check monitors the number of routes compared with the quota for total number of routes. Warning and Critical check statuses can be defined for when the percentage of routes is higher than defined thresholds.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : OrgQuotaRoutesMaxRoutesUsedPercentCrit, OrgQuotaRoutesMaxRoutesUsedPercentWarn

## BTPCFOrgQuotaServiceInstances

Description

This check monitors the number of service instances running compared to the quota for total quota services. Additionally, it reports if usage of paid services is enabled in the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : OrgQuotaServiceInstancesMaxServiceInstancesUsedPercentWarn, OrgQuotaServiceInstancesMaxServiceInstancesUsedPercentCrit

## BTPCFSecurityGroups

Description

Application Security Groups permit egress traffic from Cloud Foundry applications in the style of a firewall. This check checks if the Application Security Groups set in each space for running and staging are allowing, or not allowing, a selection of best practice network security rules. The defaults are to ensure access to at least some DNS sever, SAP’s connectivity service and AWS load balancers, whilst ensuring access to the IaaS metadata IPs are not allowed. The check can be configured in monitoring parameters to ignore validations that are not considered relevant, and there is also a custom check named BTP_CF_SECURITY_GROUPS to validate any custom connection requirements.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : SecurityGroupsCheckConnectivityAllowedToAWSLoadBalancer, SecurityGroupsCheckConnectivityAllowedToConnectivityService, SecurityGroupsCheckConnectivityAllowedToDNS, SecurityGroupsCheckConnectivityNotAllowedToMetadataEndpoint

## BTPCFSpaceQuotasRoutes

Description

This check monitors the number of routes compared against the total number of routes in each space. Warning and Critical check statuses can be defined for when the percentage of routes is higher than defined thresholds.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : SpaceQuotasRoutesMaxRoutesUsedPercentCrit, SpaceQuotasRoutesMaxRoutesUsedPercentWarn

## BTPCFSpaceQuotasMemory

Description

This check monitors the current usage of space memory quota by listing all spaces, their applications and their current memory allocation. A Warning status can be returned if a stopped application would be prevented from starting a quota using CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota.

SpaceQuotasMemMaxMemoryQuotaUsedPercentWarn and SpaceQuotasMemMaxMemoryQuotaUsedPercentCrit monitoring parameters can be used to set Warning and Critical thresholds if the total memory allocated to apps is above a set percentage of the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : CloudFoundryIncludeStoppedAppsInQuotaCalculation, CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota, SpaceQuotasMemMaxMemoryQuotaUsedPercentWarn, SpaceQuotasMemMaxMemoryQuotaUsedPercentCrit

## BTPCFSpaceQuotasAppProcessInstances

Description

This check monitors the current number of app process instances against the space total instances quota by listing all spaces, the applications and the number of running instances. A Warning status can be returned if a stopped application would be prevented from starting a quota using CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota.

SpaceQuotasMemMaxMemoryQuotaUsedPercentWarn and SpaceQuotasMemMaxMemoryQuotaUsedPercentCrit monitoring parameters can be used to set Warning and Critical thresholds if the process instances running in applications is above a set percentage of the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : CloudFoundryIncludeStoppedAppsInQuotaCalculation, CloudFoundryWarnIfAnyStoppedAppWouldExceedQuota, SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentWarn, SpaceQuotasAppProcessInstancesMaxInstancesUsedPercentCrit

## BTPCFSpaceQuotasServiceInstances

Description

This check monitors the number of service instances running in each space compared with the space quota for total quota services by listing all of the spaces. Additionally, it reports if usage of paid services is enabled in the quota.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | RealTime Monitoring
Depends on | N/A
Monitoring Parameters | : SpaceQuotasServiceInstancesMaxInstancesUsedPercentWarn, SpaceQuotasServiceInstancesMaxInstancesUsedPercentCrit

## BTPCFUsersWithCriticalOrgAuthorizations

Description

This check counts the number of users with the role Organization Manager and provides Warning and Critical statuses if the number of users is greater than defined thresholds. Additionally, the check can warn if a user with this critical authorization has been modified since the last run of the check.

Reference Data

Managed Object | SAP BTP Subaccount
Check Cycle | Daily
Depends on | N/A
Monitoring Parameters | : UsersWithCritOrgAuthWarnIfOrgManagerAssignmentModified, UsersWithCritOrgAuthMaxOrgManagerUsersCrit, UsersWithCritOrgAuthMaxOrgManagerUsersWarn