I want to monitor ssl cert expiry of my urls using ssl exporter.Need help

Pooja Chauhan

unread,

May 13, 2020, 4:49:29 AM5/13/20

to Prometheus Users

Hi ,

Need help in monitoring ssl cert of urls.I was exploring ssl exporter but could not get much info on how to download and use it.Please suggest.

Julius Volz

unread,

May 13, 2020, 4:52:06 AM5/13/20

to Pooja Chauhan, Prometheus Users

Hi,

Take a look at https://www.robustperception.io/get-alerted-before-your-ssl-certificates-expire - basically, set up the Blackbox Exporter (https://github.com/prometheus/blackbox_exporter) to probe your URLs and then use the "probe_ssl_earliest_cert_expiry" metric to build an alert for when certs are about to expire.

On Wed, May 13, 2020 at 10:49 AM Pooja Chauhan <pooja...@gmail.com> wrote:

Hi ,
Need help in monitoring ssl cert of urls.I was exploring ssl exporter but could not get much info on how to download and use it.Please suggest.

--
You received this message because you are subscribed to the Google Groups "Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/b7dc131a-e0af-4b24-a052-1b4220248a88%40googlegroups.com.

--

Julius Volz

PromLabs - promlabs.com

Pooja Chauhan

unread,

May 13, 2020, 4:54:54 AM5/13/20

to Prometheus Users

Hi I already tried through blackbox exporter but grafana panel does not show the correct information of ssl expiry related data.So checking other alternatives here .I have already asked about that in this group : https://groups.google.com/forum/#!topic/prometheus-users/LA0X83H24Fg check my problem here.

Julius Volz

unread,

May 13, 2020, 5:05:20 AM5/13/20

to Pooja Chauhan, Prometheus Users

It seems your issue is not with the Blackbox Exporter, but with getting a Grafana panel correctly configured then. Or as your comment "BTW i am using grafana 6.7.2 and 6.7.3 , for 6.7.3 it works and for 6.7.2 it does not" suggests, it might be a problem with the specific Grafana version, who knows.

--

You received this message because you are subscribed to the Google Groups "Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/12db4602-2ccc-46cc-8bf3-dce73491847f%40googlegroups.com.

Pooja Chauhan

unread,

May 13, 2020, 5:34:09 AM5/13/20

to Prometheus Users

I update grafana to 6.7.3 after discussing here then also it is the same issue. Both my panel is configured same way only then I don't know what is the issue . I have imported the grafana dashboard for blackbox exporter here(dashboard no-7587) the query is same for both panels.

On Wednesday, May 13, 2020 at 2:35:20 PM UTC+5:30, Julius Volz wrote:

It seems your issue is not with the Blackbox Exporter, but with getting a Grafana panel correctly configured then. Or as your comment "BTW i am using grafana 6.7.2 and 6.7.3 , for 6.7.3 it works and for 6.7.2 it does not" suggests, it might be a problem with the specific Grafana version, who knows.

On Wed, May 13, 2020 at 10:54 AM Pooja Chauhan <pooja...@gmail.com> wrote:

Hi I already tried through blackbox exporter but grafana panel does not show the correct information of ssl expiry related data.So checking other alternatives here .I have already asked about that in this group : https://groups.google.com/forum/#!topic/prometheus-users/LA0X83H24Fg check my problem here.

On Wednesday, May 13, 2020 at 2:19:29 PM UTC+5:30, Pooja Chauhan wrote:
Hi ,
Need help in monitoring ssl cert of urls.I was exploring ssl exporter but could not get much info on how to download and use it.Please suggest.

--
You received this message because you are subscribed to the Google Groups "Prometheus Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to promethe...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/12db4602-2ccc-46cc-8bf3-dce73491847f%40googlegroups.com.

ssl5.PNG

ssl6.PNG

Pooja Chauhan

unread,

May 13, 2020, 5:36:23 AM5/13/20

to Prometheus Users

The other one where it is not working is here

ssl7.PNG

Murali Krishna Kanagala

unread,

May 13, 2020, 9:28:21 AM5/13/20

to Pooja Chauhan, Prometheus Users

What Dashboard are you using? Do you have a link from Grafana website?

If you use the metric probe_ssl_earliest_cert_expiry you should multiply it with 1000 and use YYYY-MM-DD HH:mm:ss (on any date specific unit) unit. This will give absolute date when the cert expires.

If you want to get how much time left then use time from now unit in Grafana. it will give you how much time left for the expiry.

So your query in Grafana would be 1000 * probe_ssl_earliest_cert_expiry{your_labels}. Thats all, no need of subtracting current time.

To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/17013b45-dd69-44e8-8ef6-820ee1c95242%40googlegroups.com.

--

Regards,
Murali Krishna Kanagala

Pooja Chauhan

unread,

May 13, 2020, 9:45:43 AM5/13/20

to Prometheus Users

I have imported the grafana dashboard for blackbox exporter here(dashboard no-7587) https://grafana.com/grafana/dashboards/7587

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/17013b45-dd69-44e8-8ef6-820ee1c95242%40googlegroups.com.

Murali Krishna Kanagala

unread,

May 13, 2020, 10:35:53 AM5/13/20

to Prometheus Users

Okay. Try changing the query as i suggested above.

To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/a324ad0a-4628-40fb-a746-ad63a2e3da31%40googlegroups.com.

James Eduard

unread,

May 15, 2020, 5:09:45 AM5/15/20

to Murali Krishna Kanagala, Prometheus Users

I have the same issue as i posted here and some other members too, if you have multiple domain for ssl certificate to monitor some data doesn't match on the actual ssl certificate expiry.

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/CAKimyZve3dn8_%3DpCuU%3DOk9g4YxOD2XKyqBDxt8Zd%2Bi3FtSHPwQ%40mail.gmail.com.

James Eduard

unread,

May 15, 2020, 5:10:03 AM5/15/20

to Prometheus Users

I have the same issue as i posted here and some other members too, if you have multiple domain for ssl certificate to monitor some data doesn't match on the actual ssl certificate expiry.

Brian Candler

unread,

May 15, 2020, 6:06:18 AM5/15/20

to Prometheus Users

On Friday, 15 May 2020 10:09:45 UTC+1, James Eduard wrote:

I have the same issue as i posted here and some other members too, if you have multiple domain for ssl certificate to monitor some data doesn't match on the actual ssl certificate expiry.

Sorry, can you explain more clearly what is the problem you see, with an example?

A single SSL certificate which contains multiple domains, has only a single end date (for the certificate itself)

Murali Krishna Kanagala

unread,

May 15, 2020, 12:26:16 PM5/15/20

to Brian Candler, Prometheus Users

It does not matter how many domains are there in the cert. There will be only one expiry date.

--

You received this message because you are subscribed to the Google Groups "Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/eee9df4b-f03c-40ca-bdff-0a56189f48fa%40googlegroups.com.

Reply all

Reply to author

Forward