template

<?xml version="1.0" encoding="UTF-8"?>
<zabbix_export>
    <version>4.4</version>
    <date>2020-01-15T09:22:37Z</date>
    <groups>
        <group>
            <name>Templates</name>
        </group>
    </groups>
    <templates>
        <template>
            <template>SSL Certificates Discovery And Monitoring</template>
            <name>SSL Certificates Discovery And Monitoring</name>
            <groups>
                <group>
                    <name>Templates</name>
                </group>
            </groups>
            <applications>
                <application>
                    <name>SSL Sectificate Discovery</name>
                </application>
            </applications>
            <discovery_rules>
                <discovery_rule>
                    <name>SSL Ports</name>
                    <type>EXTERNAL</type>
                    <key>ssl-discovery.sh[{HOST.CONN}]</key>
                    <delay>1d</delay>
                    <lifetime>7d</lifetime>
                    <item_prototypes>
                        <item_prototype>
                            <name>Certificate SAN on Port {#PORT}</name>
                            <type>EXTERNAL</type>
                            <key>ssl-cert-info.sh[&quot;--host&quot;,{HOST.CONN},&quot;--port&quot;,{#PORT},&quot;--alt&quot;]</key>
                            <delay>1h</delay>
                            <trends>0</trends>
                            <value_type>TEXT</value_type>
                            <applications>
                                <application>
                                    <name>SSL Sectificate Discovery</name>
                                </application>
                            </applications>
                            <trigger_prototypes>
                                <trigger_prototype>
                                    <expression>{change()}=1</expression>
                                    <name>SSL-cert SAN changed on {HOST.CONN}:{#PORT}</name>
                                    <priority>INFO</priority>
                                    <manual_close>YES</manual_close>
                                </trigger_prototype>
                            </trigger_prototypes>
                        </item_prototype>
                        <item_prototype>
                            <name>Certificate CN on Port {#PORT}</name>
                            <type>EXTERNAL</type>
                            <key>ssl-cert-info.sh[&quot;--host&quot;,{HOST.CONN},&quot;--port&quot;,{#PORT},&quot;--cn&quot;]</key>
                            <delay>1h</delay>
                            <trends>0</trends>
                            <value_type>TEXT</value_type>
                            <applications>
                                <application>
                                    <name>SSL Sectificate Discovery</name>
                                </application>
                            </applications>
                            <trigger_prototypes>
                                <trigger_prototype>
                                    <expression>{change()}=1</expression>
                                    <name>SSL-cert CN changed on {HOST.CONN}:{#PORT}</name>
                                    <priority>INFO</priority>
                                    <manual_close>YES</manual_close>
                                </trigger_prototype>
                            </trigger_prototypes>
                        </item_prototype>
                        <item_prototype>
                            <name>Certificate Validity Days Remaining on Port {#PORT}</name>
                            <type>EXTERNAL</type>
                            <key>ssl-cert-info.sh[&quot;--host&quot;,{HOST.CONN},&quot;--port&quot;,{#PORT},&quot;--end_days&quot;]</key>
                            <delay>1h</delay>
                            <applications>
                                <application>
                                    <name>SSL Sectificate Discovery</name>
                                </application>
                            </applications>
                            <trigger_prototypes>
                                <trigger_prototype>
                                    <expression>{last()}&lt;={$SSL_HIGH_DAYS}</expression>
                                    <name>SSL-cert expiring in less than {$SSL_HIGH_DAYS} on {HOST.CONN}:{#PORT}</name>
                                    <opdata>Days remaining {ITEM.LASTVALUE}</opdata>
                                    <priority>HIGH</priority>
                                </trigger_prototype>
                                <trigger_prototype>
                                    <expression>{last()}&lt;={$SSL_WARNING_DAYS}</expression>
                                    <name>SSL-cert expiring in less than {$SSL_WARNING_DAYS} on {HOST.CONN}:{#PORT}</name>
                                    <opdata>Days remaining {ITEM.LASTVALUE}</opdata>
                                    <priority>WARNING</priority>
                                </trigger_prototype>
                            </trigger_prototypes>
                        </item_prototype>
                        <item_prototype>
                            <name>Certificate Issuer on Port {#PORT}</name>
                            <type>EXTERNAL</type>
                            <key>ssl-cert-info.sh[&quot;--host&quot;,{HOST.CONN},&quot;--port&quot;,{#PORT},&quot;--issuer&quot;]</key>
                            <delay>1h</delay>
                            <trends>0</trends>
                            <value_type>TEXT</value_type>
                            <applications>
                                <application>
                                    <name>SSL Sectificate Discovery</name>
                                </application>
                            </applications>
                            <trigger_prototypes>
                                <trigger_prototype>
                                    <expression>{change()}=1</expression>
                                    <name>SSL-cert Issuer changed on {HOST.CONN}:{#PORT}</name>
                                    <priority>INFO</priority>
                                    <manual_close>YES</manual_close>
                                </trigger_prototype>
                            </trigger_prototypes>
                        </item_prototype>
                        <item_prototype>
                            <name>Certificate Thumbprint on Port {#PORT}</name>
                            <type>EXTERNAL</type>
                            <key>ssl-cert-info.sh[&quot;--host&quot;,{HOST.CONN},&quot;--port&quot;,{#PORT},&quot;--thumbprint&quot;]</key>
                            <delay>1h</delay>
                            <trends>0</trends>
                            <value_type>TEXT</value_type>
                            <applications>
                                <application>
                                    <name>SSL Sectificate Discovery</name>
                                </application>
                            </applications>
                            <trigger_prototypes>
                                <trigger_prototype>
                                    <expression>{change()}=1</expression>
                                    <name>SSL-cert Thumbprint changed on {HOST.CONN}:{#PORT}</name>
                                    <priority>WARNING</priority>
                                    <manual_close>YES</manual_close>
                                </trigger_prototype>
                            </trigger_prototypes>
                        </item_prototype>
                    </item_prototypes>
                </discovery_rule>
            </discovery_rules>
            <macros>
                <macro>
                    <macro>{$SSL_HIGH_DAYS}</macro>
                    <value>3</value>
                </macro>
                <macro>
                    <macro>{$SSL_WARNING_DAYS}</macro>
                    <value>30</value>
                </macro>
            </macros>
        </template>
    </templates>
</zabbix_export>