Zabbix-6.2-SSL-Checks.yaml

zabbix_export:
  version: '6.2'
  date: '2023-01-05T07:15:31Z'
  template_groups:
    -
      uuid: a571c0d144b14fd4a87a9d9b2aa9fcd6
      name: Templates/Applications
  host_groups:
    -
      uuid: f2481361f99448eea617b7b1d4765566
      name: 'Discovered hosts'
  templates:
    -
      uuid: 00fa5b3c4939412cab2bf438b2256fb9
      template: 'SSL Server Discovery'
      name: 'SSL Servers'
      description: 'Discovery SSL certificates from hosts.'
      groups:
        -
          name: Templates/Applications
      discovery_rules:
        -
          uuid: 7b9dc084bcc74e818a626c6af884e591
          name: 'SSL-server Discovery'
          type: EXTERNAL
          key: 'ssl_discovery.sh[sslserver.discovery]'
          delay: 1h
          host_prototypes:
            -
              uuid: 81979dd524374fe587a9b5c3971a8f91
              host: 'SSL-Server {#SSLSERVER}'
              name: 'SSL-Server {#SSLSERVER}'
              group_links:
                -
                  group:
                    name: 'Discovered hosts'
              templates:
                -
                  name: 'SSL Server Status'
              macros:
                -
                  macro: '{$SSLPORT}'
                  value: '{#SSLPORT}'
                -
                  macro: '{$SSLSERVER}'
                  value: '{#SSLSERVER}'
              tags:
                -
                  tag: Application
                  value: 'HTTPS Service'
              custom_interfaces: 'YES'
              interfaces:
                - {  }
          lld_macro_paths:
            -
              lld_macro: '{#SSLPORT}'
              path: $.sslport
            -
              lld_macro: '{#SSLSERVER}'
              path: $.sslserver
          preprocessing:
            -
              type: JSONPATH
              parameters:
                - '$.SSLSERVERS[*]'
    -
      uuid: 61ce30919193424ba30f057e183a6143
      template: 'SSL Server Status'
      name: 'SSL Server Status'
      description: 'Get certificates status data.'
      groups:
        -
          name: Templates/Applications
      items:
        -
          uuid: f25bc12eda154dd2be8003a3bd519141
          name: 'Certificate lifetime'
          type: EXTERNAL
          key: 'ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "expire_days"]'
          delay: 1h
          history: 30d
          trends: '0'
          value_type: FLOAT
          units: Days
          tags:
            -
              tag: Application
              value: 'SSL Checks'
          triggers:
            -
              uuid: 1faa31fe08cd44acba3517561385c859
              expression: 'last(/SSL Server Status/ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "expire_days"],#1)<=1'
              name: 'Certificate lifetime is under 1 day.'
              opdata: 'Current remaining time {ITEM.LASTVALUE1}'
              priority: DISASTER
              manual_close: 'YES'
            -
              uuid: 313e126d35ae430c9777853c128c0762
              expression: 'last(/SSL Server Status/ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "expire_days"],#1)<=15'
              name: 'Certificate lifetime is under 15 days.'
              opdata: 'Current remaining time {ITEM.LASTVALUE1}'
              priority: HIGH
              manual_close: 'YES'
            -
              uuid: 914651cc0f52428cb14012d16b9e1b52
              expression: 'last(/SSL Server Status/ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "expire_days"],#1)<=45'
              name: 'Certificate lifetime is under 45 days.'
              opdata: 'Current remaining time {ITEM.LASTVALUE1}'
              priority: AVERAGE
              manual_close: 'YES'
            -
              uuid: 65057dc5f38a4327831416089dba47ff
              expression: 'last(/SSL Server Status/ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "expire_days"],#1)<=60'
              name: 'Certificate lifetime is under 60 days.'
              opdata: 'Current remaining time {ITEM.LASTVALUE1}'
              priority: WARNING
              manual_close: 'YES'
        -
          uuid: bbfd6d30276c454fbc86650f8823c819
          name: 'Certificate serial'
          type: EXTERNAL
          key: 'ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "serial"]'
          delay: 1h
          history: 30d
          trends: '0'
          value_type: TEXT
          tags:
            -
              tag: Application
              value: 'SSL Checks'
        -
          uuid: 4f9fa3b66e9b4dbe86a417fae7e76996
          name: 'Certificate issuer'
          type: EXTERNAL
          key: 'ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "ssl_issuer"]'
          delay: 1h
          history: 30d
          trends: '0'
          value_type: TEXT
          tags:
            -
              tag: Application
              value: 'SSL Checks'
        -
          uuid: 15a78374020a448aa9d996976f72969b
          name: 'Certificate subject'
          type: EXTERNAL
          key: 'ssl_check.sh["{$SSLSERVER}", "{$SSLPORT}", "ssl_subject"]'
          delay: 1h
          history: 30d
          trends: '0'
          value_type: TEXT
          tags:
            -
              tag: Application
              value: 'SSL Checks'