Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-20075

[template][F5 Big-IP SNMP] wrong trigger expression for certificate monitoring

    XMLWordPrintable

Details

    • Problem report
    • Status: READY TO DEVELOP
    • Major
    • Resolution: Unresolved
    • 5.4.4
    • Templates (T)
    • Team INT
    • Sprint 83 (Dec 2021)

    Description

      Steps to reproduce:

      Create a host and link template "F5 Big-IP SNMP" to this host. If host is a F5 device, installed certificates are discovered by "Certificate discovery" rule.

      Result:

      Trigger expression to monitor certificate expiration date is wrong :

       

      last(/F5 Big-IP SNMP/bigip.cert.expiration.date[{#CERT.NAME}]) + 86400 * {$BIGIP.CERT.MIN} < now()
      

       

      Problem isn't not created when there is less than {$BIGIP.CERT.MIN} days before certificate expiration but {$BIGIP.CERT.MIN} days later after certificate expiration.

      Expected:

      Trigger expression should be :

       

      last(/BDF F5 Big-IP SNMP/bigip.cert.expiration.date[{#CERT.NAME}]) - 86400 * {$BIGIP.CERT.MIN} < now()
      

      I also suggest improvements :

       

      1. The existing trigger prototype should depends on another trigger prototype (severity=warning) to monitor expired certificate :
        last(/BDF F5 Big-IP SNMP/bigip.cert.expiration.date[{#CERT.NAME}]) < now()
        

        Thus, F5 admins are notified when a certificate is about to expire and also when certificate is expired.

      2. Increase update interval for certificate discovery (1d ?)
      3. Increase update interval for item prototypes (12h ?)
      4. Delete throttling (preprocessing)
      5. Configure trends to 0 days and history to 1 day

      Attachments

        Activity

          People

            abakaldin Alexander Bakaldin
            zabbix-thomas thomas
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: