Enter your own Checkmk ideas or vote for existing ones

In order to continually improve Checkmk, we're looking for your ideas. They provide valuable input to our roadmap discussions and allow us to contact you directly for more in-depth discussions or during development. A few tips:

  • Concisely describing the problem rather than the solution will help other users understand and relate to your idea.
  • An idea should be easy to understand. This will increase your chances of getting votes.
  • Be as specific as possible. Knowing exactly what to expect when voting on an idea makes it a much better experience for all of us when it is adapted later in Checkmk.

Further information can be found in this guide. If you have any questions, please send an email to ideas@checkmk.com.

Event Console - Rule Pack for Checkmk Server and Relay Logs

Create a built-in rule pack shipped with Event Console and proper Bakery rules with the most important log files of Checkmk Server. This would be useful because once ...
Suggested by: Paulo Santana (18 Jul) Upvoted: yesterday Comments: 0

General Search: example: LOGWATCH: show search string, log line of found search string in output

General Search: example: LOGWATCH: show search string and log line of the found search string in the output In general a FeatureRequest for all search functions ...
Suggested by: JPH (24 Jun) Upvoted: 24 Jun Comments: 0

Event Console - View latest message from any given rule

When working in Event Console we need to be switching tabs because in Event Console there is no options to quickly open all messages from a given rule. We can check ...
Suggested by: Paulo Santana (25 Jun) Upvoted: 2 days ago Comments: 0

Event Console: higher notifications throughput (by asynchronous handling)

Problem Statement: In Event Console when using the "send monitoring notification" action the overall Event Console (mkeventd) throughput decreases dramatically (to ...
Suggested by: Boris Bockstaele (09 Apr) Upvoted: 11 May Comments: 0

Logwatch: deleting or acknowledge individual entries

At the moment the logwatch plugin of Checkmk allows for log entries to be detected via patterns and then being copied onto the monitoring server in order to view ...
Suggested by: GAPLAST (09 Mar) Upvoted: 14 Apr Comments: 1
Clarification required Log monitoring / Event Console

mk_logwatch: Always process the last log line, even if it does not end with an end-of-line character

Ensure that mk_logwatch processes the final log line, even when it ends with with end‑of‑file (EOF) instead of an end‑of‑line (EOL). On Windows, files are not ...
Suggested by: Lars Sörensen (27 Feb) Upvoted: 14 Apr Comments: 0

Set lifetime on Event Console to auto archive events

After X number of days automatically archive events that have a last occurrence older than X days.
Suggested by: Bryon (09 Oct, '25) Upvoted: 28 Oct, '25 Comments: 2

Add bulk acknowledgement for log module

I have multiple hosts wit the log module installed in the agent. Sometimes, for example after a cluster update, the logs get flooded with messages that are not ...
Suggested by: Peter T. (03 Sep, '25) Upvoted: 19 Dec, '25 Comments: 0

Logwatch: improve logwatch to handle only one file, the newest file with manual service name

It is imperative to enhance the functionality of Logwatch to facilitate the monitoring of a single file, specifically the most recent one. At present, the issue ...
Suggested by: JPH (15 May, '25) Upvoted: 22 Aug, '25 Comments: 2

Support advanced Log-Management

It has been evident for many years that Checkmk's Event Console no longer meets customer requirements for a modern log management tool. The filters, analyses, and ...
Suggested by: Lars Sörensen (27 Mar, '25) Upvoted: 09 Oct, '25 Comments: 6

EC - Replace Timezone with a Start Time when counting Messages

No normal user understands how to configure e.g. 13:00 as an interval start time with the UTC time zone. Please replace the interval start time with a simple ...
Suggested by: Lars Sörensen (19 Dec, '24) Upvoted: 09 Oct, '25 Comments: 0

Event Console: allow negate Filter in EC Filter and Event State check

When will it be possible to use negate searches in the Event Console Regex Filter and Event State check? This is especially very useful if you have a lot of events ...
Suggested by: Lars Sörensen (18 Jul, '24) Upvoted: 13 May Comments: 0

Event console to handle JSON input

It would be nice if the event console would accept new line delimited json style input so log relays like logstash, fluentd, etc could send more structured data ...
Suggested by: Andy wettstein (14 Mar, '24) Upvoted: 25 Jun Comments: 0

Event Console - Make Rule packs table possible to sort

Right now there is no chance to sort by any of the topics given (State, ID, Title, Customer, Rules, Hits) With more and more Rules implemented you are not getting ...
Suggested by: Daniel Roettgermann (17 Jan, '24) Upvoted: 17 Nov, '25 Comments: 0

Event Rule criteria "Host Tags"

In the Event Rule it is possible to set a matching criteria for the host name "Match host". We would appreciate the possibility to use the "host tag" like in the ...
Suggested by: Leandro Zampieri (11 Aug, '23) Upvoted: 05 Jun, '24 Comments: 6

Windows Eventlog Monitoring including Level ID

At least the Sharepoint event logs have more levels than just info, warning and error according to ...
Suggested by: Robert Sander (21 Apr, '23) Upvoted: 12 Jun, '25 Comments: 0

Make mkeventd able to listen on another port

mkeventd is binding itself on UDP/514 & TCP/514 for receiving syslogs. This value is hard-coded and blocks integration with other syslog daemons. A config file ...
Suggested by: qb (04 Apr, '23) Upvoted: 05 May, '25 Comments: 0

Logwatch: Windows Event Log: Auto-Remove Log entries after X days

We use the checkmk agent on Windows Server. The agent has the logwatch plugin builtin, to monitor the Windows event logs. That is a good plugin, but it need some ...
Suggested by: Thomas (23 Jan, '23) Upvoted: 20 Apr Comments: 4

Improve handling of files with date or numbers in Logwatch Event Console Forwarding

There are many cases where log files contain a date or a sequence number in the name. Unfortunately, the "Logwatch Event Console Forwarding" service does not ...
Suggested by: Lars Sörensen (17 Dec, '22) Upvoted: 22 Dec, '25 Comments: 3

mk_logwatch: Ensure that no events are lost during log rotations.

Please add support for reading from rotating log files. Log files are usually renamed or get a new name when certain criteria are met. Depending on the operating ...
Suggested by: Lars Sörensen (17 Dec, '22) Upvoted: 09 Oct, '25 Comments: 3

Google Cloud: capture log events

As a GCP user, I want to have Checkmk ingesting all log events and allow rules to process them
Suggested by: Thomas Lippert (18 Nov, '22) Upvoted: 19 Jun, '23 Comments: 0

EC: Reset Hit Counter per Rule / RulePack

Currently, you can only reset the hit counter for EC rules globally for all EC rules on all sites at once. If you make changes to EC rules or if you want to see if ...
Suggested by: Lars Sörensen (10 Oct, '22) Upvoted: 09 Oct, '25 Comments: 0

EC: Windows eventlog facility

Please make Windows eventlog entries clearly identifiable in the Event Console by adding a dedicated enum as facility
Suggested by: Thomas Lippert (09 Oct, '22) Upvoted: 19 Feb Comments: 2

mk_logwatch: support muliline logs

More and more applications write multiline logs and it can happen that the search pattern for relevant log lines is spread over several lines. Therefor ...
Suggested by: Lars Sörensen (09 Aug, '22) Upvoted: 09 Oct, '25 Comments: 10

Add metrics to logwatch and events check

The service checks "Log *" and "Events *" show the number of critical and warn messages in their plugin output. It would be nice to have metrics that record these ...
Suggested by: Robert Sander (29 Jul, '22) Upvoted: 09 Oct, '25 Comments: 2

Align behavior for uploaded MIB files in the web frontend and in the local directory structure

During the upload of MIB files on the web frontend, these files are converted to python (and pyc) files. But there is another way to provide MIB files for the event ...
Suggested by: Marcel Arentz (12 Jul, '22) Upvoted: 18 Jul, '24 Comments: 0

Add time period configuration for „Expect regular messages“ in the event console

Example: during 9am-5pm expect this messeage every x minutes
Suggested by: Thomas Lippert (24 Jun, '22) Upvoted: 07 Jan, '23 Comments: 4

AWS Cloudwatch Alarms into Event Console

Currently, the AWS CloudWatch Service is a single service. So you only get one notification for the first alert, but not for any further alert as long as the first ...
Suggested by: Fabian (04 May, '22) Upvoted: 10 Sep, '25 Comments: 3

Logwatch: Delete multiple logfiles more easily and flexibly

Allow deletion of multiple log files, selected by the user in one delete operation Currently, one can see all logfiles by going to this URL within a site: ...
Suggested by: Thomas Lippert (26 Apr, '22) Upvoted: 09 May, '23 Comments: 5