added ssl certificates template

This commit is contained in:
Pavel Muhortov 2023-12-14 22:17:13 +03:00
parent 509682903b
commit bdbdb4441e
3 changed files with 114 additions and 0 deletions

View File

@ -9,6 +9,8 @@ Templates, scripts and hints for Zabbix.
* [VPN](templates/applications/vpn) * [VPN](templates/applications/vpn)
* [OpenVPN](templates/applications/vpn/openvpn/6.0) * [OpenVPN](templates/applications/vpn/openvpn/6.0)
* [Wireguard](templates/applications/vpn/wireguard/6.0) * [Wireguard](templates/applications/vpn/wireguard/6.0)
* [Components](templates/components)
* [certificate](templates/components/certificate/6.0)
## Useful links ## Useful links

View File

@ -0,0 +1,46 @@
# SSL certificates
## Overview
This template is designed for [X.509](https://en.wikipedia.org/wiki/X.509) certificate monitoring by Zabbix and requires external script.
## Requirements
- Zabbix version: 6.0 and higher.
- [cert-info.sh](https://git.hmp.today/pavel.muhortov/utils#cert-info-sh)
- [openssl](https://www.openssl.org/)
## Tested versions
This template has been tested on:
- openssl 1.0.2k
### Macros used
|Name|Description|Default|
|----|-----------|-------|
|{$URL}|Certificate location|`host.domain.zone`|
### Items
|Name|Description|Type|Key and additional info|
|----|-----------|----|-----------------------|
|Expires|Certificate remaining days|External check|cert-info.sh["{$URL}","-r"]|
### Triggers
|Name|Description|Expression|Severity|Dependencies and additional info|
|----|-----------|----------|--------|--------------------------------|
|SSL certificate expires||last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<7|Warning|Manual close: No|
|SSL certificate expires soon||last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<3|Average|Manual close: No|
|SSL certificate expired||last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<1|High|Manual close: No|
### Discovery rules
There are no discovery rules in this template.
### Item prototypes for Clients discovery
There are no item prototypes in this template.

View File

@ -0,0 +1,66 @@
zabbix_export:
version: '6.0'
date: '2023-12-14T18:00:00Z'
groups:
-
uuid: 57b7ae836ca64446ba2c296389c009b7
name: Templates/Modules
templates:
-
uuid: 83294c6d820c429789f8256ca0654ff3
template: 'SSL certificates'
name: 'SSL certificates'
description: 'SSL certificates information'
groups:
-
name: Templates/Modules
items:
-
uuid: 5974a58a626c451b86ccfbf062ad1539
name: Expires
type: EXTERNAL
key: 'cert-info.sh["{$URL}","-r"]'
delay: 6h
history: 14d
trends: 90d
units: day
tags:
-
tag: component
value: certificate
triggers:
-
uuid: 0de5c427901f4ff8993a547bedf5ff22
expression: 'last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<1'
name: 'SSL certificate expired'
priority: HIGH
-
uuid: 1cb9a236e3cb4eafb95d425e5746da61
expression: 'last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<7'
name: 'SSL certificate expires'
priority: WARNING
-
uuid: 61a2ed70a8ce4e49bc2b5d4798b1bb01
expression: 'last(/SSL certificates/cert-info.sh["{$URL}","-r"],#1)<3'
name: 'SSL certificate expires soon'
priority: AVERAGE
tags:
-
tag: component
value: certificate
macros:
-
macro: '{$URL}'
value: host.domain.zone
graphs:
-
uuid: 7b84a25da6d940f183edbd5a1b057e24
name: Expires
show_triggers: 'NO'
graph_items:
-
drawtype: GRADIENT_LINE
color: 00FF00
item:
host: 'SSL certificates'
key: 'cert-info.sh["{$URL}","-r"]'