• Overview
  • Supported Checks
  • 💹 Zabbix Monitoring
    • Trigger Overview
    • Latest Data
    • Host Config after LLD
• 📐 General Workflow
  • Technical (Zabbix) Details
• 💻 Setup
  • Prerequisites
  • Agent
  • Zabbix configuration
    • Template links
    • Discovery rules
    • Items collected
    • Triggers
• ⏩ Python Script standalone
  • Tested on

Zabbix Template and Script: Executes the following checks on a list of domains in JSON file, add check results to JSON and sends the result of each check to Zabbix, updating status of items.

• DNS Checks
  • SPF Record present
  • DMARC Record present
  • DNSSEC enabled
• SSL Checks
  • Trusted certificate
  • Days before cert expire
  • Certificate Issuer

Check results can be sent to Zabbix server updating items.

ℹ️ Script can also run without Zabbix. Only JSON output is generated in log file then.

Input

  "domains": [
    {
      "domain": "www.apple.com",
      "description": "sample subdomain to check for certs",
      "cert_checks": true,
      "dns_checks": false
    },
    ...
  ]
}

Output

{
  "domains": [
    {
      "domain": "www.apple.com",
      "description": "sample subdomain to check for certs",
      "cert_checks": true,
      "dns_checks": false,
      "check_results": {
        "cert_expire_days": 107,
        "cert_issuer": "Apple Public EV Server RSA CA 2 G1",
        "cert_trusted": "True"
      }
    },
    ...
  ]
}

• Zabbix Template contains JS script for downloading and parsing domain file. This sources the Low-Level discovery (LLD)
• LLD creates trapper items for each domain check, waiting to be populated by python script from agent
• For triggering script execution, template creates a control item of type Zabbix Agent using userparameter on agent machine
• On agent, python script with venv and dependencies needs to be installed
• .sh wrapper script with Zabbix input parameters is used for executing python script
• Script Parameters can be configured by following Zabbix Macros

• Agent needs to be able to connect to Internet: DNS udp/53, HTTPS tcp/443
• Agent: python > 3.6 installed

DMPATH=/opt/ZabbixDomainMonitor
sudo mkdir $DMPATH
DMTMP=$(mktemp -d)

curl -LkSs https://api.github.com/repos/gitbock/ZabbixDomainMonitor/tarball --output-dir $DMTMP -o dm.tgz
sudo tar xvzf $DMTMP/dm.tgz -C $DMPATH --strip-components 1
sudo rm -fR $DMTMP

# Ubuntu
sudo apt install libssl-dev python3-dev python3-venv gcc

# RedHat
?

sudo python3 -m venv $DMPATH/.dmvenv
sudo $DMPATH/.dmvenv/bin/pip3 install -r $DMPATH/requirements.txt
sudo mkdir $DMPATH/log

sudo chown zabbix.zabbix -R $DMPATH
sudo chmod 755 $DMPATH/dm.py
sudo chmod 755 $DMPATH/dm.sh

sudo cp $DMPATH/zabbix/userparameter_dm.conf /etc/zabbix/zabbix_agentd.d/
sudo chown zabbix.zabbix /etc/zabbix/zabbix_agentd.d/userparameter_dm.conf
sudo systemctl restart zabbix-agent

sudo find $DMPATH -name sslpsk.py -exec sed -i "s/if sys.version_info >= (3, 5)/if (3, 5) <= sys.version_info <= (3, 7)/g" '{}' \;
sudo chown zabbix.zabbix -R $DMPATH

zabbix@agent# /opt/ZabbixDomainMonitor/dm.sh <URL with domains.json>

1. Install Template by downloading and importing the latest template file from this repo to your Zabbix Server.
2. Link Template on host you installed the script
3. Overwrite the {$DM_*} Macros on this host, reflecting your needs
4. Execute "DomainMonitor discovery" manually with "Execute now" to populate the items immediately
5. Wait a few seconds. Sometimes I needed to execute it twice. If Zabbix server can download and parse your domain file, trapper items appear for this host
6. Trigger the script by selecting the item "Execute DomainMonitor Script" with "Execute now" on the host.
7. Watch Latest Data if items are populated

Zabbix Template

Items collected once

Items collected per domain (LLD)

Each trigger is created per domain.

You may run the python script standalone from command line for testing or for just getting JSON output.

# /opt/ZabbixDomainMonitor/dm.py -f https://your-server.com/domains.json

Following parameters can be used

• Ubuntu LTS 22
• Zabbix 6.2 Server
• Zabbix Agent1 / Agent2