does solarwinds linux agent monitor certificate?

soheilamiri

Hi everyone

i am deployed solarwinds Linux agent on my test server to monitor server resource.(CPU,RAM,HDD,network)

the agent list resources is:

i also using SSL certificate template to monitor my certifications status.

i had 3 node on my certificate monitoring template:

i using this topic [LINK] to create a dashboard to view my certificate expiration date. every thing work fine.

until i installing linux agent on my test server. my query result show more than nodes that i wanted to monitor.

my question is:
1- how linux agent exactly work and what information does it collect?
2- how can i fix the problem ?

Find more posts tagged with

sam

Linux

certificate

Accepted answers

KMSigma.SWI

Your query is pulling ALL component statistics for anything being monitored (as long as the returned statistic is under 70). You'd need to filter it to only show the ones you want.

SELECT [Stats].ComponentStatisticData
     , [Stats].Component.DisplayName AS [ComponentName]
     , [Stats].Component.Application.DisplayName AS [ApplicationName]
     , [Stats].Component.Application.Node.Caption AS [Node]
     , [Stats].Component.Application.Node.IP AS [IP]
FROM Orion.APM.CurrentStatistics AS [Stats]
WHERE [Stats].ComponentStatisticData < 70
-- Filter on the Application Name
  AND [Stats].Component.Application.DisplayName = 'SSL Certificate Expiration - CI, CN, and Expiry Date'

There are a few extra fields being returned from this query, but you don't need to show those entries in the Modern Dashboard.

All comments

KMSigma.SWI

There are a few queries in your link. What EXACT query are you using to populate that table and KPI widget? I'm not overly familiar with that specific SSL Certificate application template, but I'm happy to try and help.

soheilamiri

this is main query

SELECT TOP 30 NodeID, ComponentStatisticData
FROM Orion.APM.CurrentStatistics
where ComponentStatisticData < 70;

the nodeID 146 is not valid and i did not put it to certificate template as saild.

KMSigma.SWI

Your query is pulling ALL component statistics for anything being monitored (as long as the returned statistic is under 70). You'd need to filter it to only show the ones you want.

SELECT [Stats].ComponentStatisticData
     , [Stats].Component.DisplayName AS [ComponentName]
     , [Stats].Component.Application.DisplayName AS [ApplicationName]
     , [Stats].Component.Application.Node.Caption AS [Node]
     , [Stats].Component.Application.Node.IP AS [IP]
FROM Orion.APM.CurrentStatistics AS [Stats]
WHERE [Stats].ComponentStatisticData < 70
-- Filter on the Application Name
  AND [Stats].Component.Application.DisplayName = 'SSL Certificate Expiration - CI, CN, and Expiry Date'

There are a few extra fields being returned from this query, but you don't need to show those entries in the Modern Dashboard.

KMSigma.SWI

As far as how the Linux agent works....

Both the Windows and Linux agent operate the same way with regards to application templates.

If you use a script component and tell it to run as the agent, it tries to run it under the user space of the agent user on the machine. If the agent user has access to the data, it's returned.
If you tell it to run agentless (default), it runs from the Polling Engine (typically against the IP/name of the agent) and tries to return data.

soheilamiri

thanks @KMSigma.SWI that's work fine

KMSigma.SWI

For this one specifically, it uses PowerShell (on the polling engine) which takes the parameter of https://${Node.DNS}.

You can see what exactly it does by editing the template, but from a high level...

It builds a web request to the target server's DNS name via HTTPS.
It makes that request, discarding the content (not needed).
It extracts the certificate information (expiration, issuer) from the request.
It calculates the number of days before the certificate is due to expire.
It returns those three pieces of information (Issuer, Expiration Date, Days Left until Expiration) back to the component monitor.

[embed:6b06e1a7-0ec1-4e43-9421-8caaf95469b6:3aae6d2b-6c09-49e7-998a-6c202c4fe41a:message=I%20didn%27t%20write%20this%20application%20template%2C%20I%27m%20just%20interpreting%20what%20I%27m%20reading%20after%20importing%20%C2%A0SSL%20Certificate%20Expiration%20-%20CI%2C%20CN%2C%20and%20Expiry%20Date%C2%A0&type=information]

I did notice a potential problem with the script - it doesn't support non-standard HTTPS ports. If your secure website is running on 8443 or 4443 or 8787 or anything else, this script will probably fail.

soheilamiri

i could not find any useful documentation or guide for customizing agent configuration to run my script on remore machine and return the data.

KMSigma.SWI

Under Advanced, change the Preferred Polling Method to Agent.

And then under the component itself, change the Execution Mode to Remote Host.

BUT this won't work on Linux agents because Linux doesn't support Windows PowerShell 5.1 (which is what the Script Component Monitor uses).

soheilamiri

i will try my custom script and let you know if any problem