A new trick to learn to our zabbix monit ... / 2010-11-05

2010-11-05 A new trick to learn to our zabbix monit ... 8 years ago
A new trick to learn to our zabbix monitoring setup at work is a check for SSL certificate lifetime. Something you don't have to check very often but it gives a lot of support effort when you are too late.

Based on Monitoring of SSL certificate expiration time - Zabbix forums I did some work but decided that perl was my weapon of choice. Resulting test script:

Script deleted, there is now a better version in updated the zabbix ssl certificate test script to be able to use starttls services.

Which I would like to run once per week. But zabbix wants to run every test at least once every 12 hours. Ok. The test is simple: start warning when the value drops below 2592000 (one month worth of seconds).

The next trick is to use the zabbix api access to get the list of hosts which are monitored for SSL certificates and publish the result in our internal documentation mediawiki. Still working on that bit: selecting hosts in a group and selecting the templates for each host. I want templates per host, because that will show which SSL port is tested.

That is also my first perl JSON programming. Which is just a lot of use of Data::Dumper to figure out what kind of interesting objects are returned and picking out the details I want.

Tags: , ,

, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred.

PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers pgp key statistics for 0x5BA9368BE6F334E4 Koos van den Hout
RSS
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated in 0.004038 seconds.