intermitten problem with Template SSL Cert Check External on zabbix 3.4.6

[dl888888]

I'm running zabbix 3.4.6 on Ubuntu 16.04. I set up Template SSL Cert Check External to monitor cert expiration. It seems to work but frequently I get a ton of notification about State: Unknown. A few hours later it would resolve itself. See the email notifications below.

Anyone else having this problem? I thought this might be a bug that was fixed a couple of revisions back?


On 3/30/18, 12:16 PM, "[email protected]" <[email protected]> wrote:

Trigger name: SSL certificate on discourse.base2d.com expires in less than 15 days (86 days days remaining)
Expression: {discourse.base2d.com:zext_ssl_cert.sh[-d,{HOST.CONN},{$SSL_PORT},{$SNI}].last(0)}<15
State: Normal


On 3/30/18, 6:16 AM, "[email protected]" <[email protected]> wrote:

Trigger name: SSL certificate on discourse.base2d.com expires in less than 15 days (87 days days remaining)
Expression: {discourse.base2d.com:zext_ssl_cert.sh[-d,{HOST.CONN},{$SSL_PORT},{$SNI}].last(0)}<15
State: Unknown


Thanks,

Derek

[aigars.kadikis]

Hi, dl888888!

How many hosts did you configure for SSL expiration check? Did you change any default update interval for item keys in template?
I would suggest to give it a shot to try to increase the "Timeout=" parameter in zabbix_server.conf. The default interval is 3 seconds. These seconds are the time window for external check/script to complete. Maybe this is not enough in your setup. After you change Timeout parameter, please restart zabbix servers service:
systemctl restart zabbix-server

Take a look on Zabbix server data gathering graph, as well:


Regards,
Aigars