Agent2 SSL plugin

[olegus]

I found this page that is supposed to help me with my task - https://www.zabbix.com/integrations/ssl
The problem I have - I have no clue how to install it on agent host. Looks like it is so well known information that is omitted from all tutorials
What exactly is zabbix agent "plugin" and what am I suppose to do to "install" it? Any files to copy somewhere?

[Markku]

First, you need to have Zabbix agent 2 on the host, not the original Zabbix agent.

Second, https://www.zabbix.com/documentation...ugins#built-in says that the required WebCertificate plugin is built-in in agent 2, so nothing more is required locally on the agent host. You should be able to test the plugin using zabbix_get as described in the page you linked.

Then you import the template in Zabbix server (if not there yet), or you can manually configure a web.certificate.get[] item in the host, using Zabbix agent as the item type.

Markku

[Markku]

First, you need to have Zabbix agent 2 on the host, not the original Zabbix agent.

Second, https://www.zabbix.com/documentation...ugins#built-in says that the required WebCertificate plugin is built-in in agent 2, so nothing more is required locally on the agent host. You should be able to test the plugin using zabbix_get as described in the page you linked.

Then you import the template in Zabbix server (if not there yet), or you can manually configure a web.certificate.get[] item in the host, using Zabbix agent as the item type.

Markku

[olegus]

1. When you say "import the template", are you referring to this one - Website certificate by Zabbix agent 2 ?
2. Is it possible to monitor many domains with one host/template? Can I set one dedicated agent/host to monitor all my certificates? Example shows only one domain specified in macro.

Thanks

[Markku]

Template, yes (actually you linked to that template, in your question, not me).

With that template it is only one TLS hostname per Zabbix host. But, when using passive items, you can have unlimited number of hosts in Zabbix referring to the same agent. Just create a host for every TLS cert you want to monitor, define macros for each host separately, and then use the same agent IP/DNS name for all those.

Markku