From 520eb6fc15fb3dbf5e1438f32cb8ef12e8747798 Mon Sep 17 00:00:00 2001 From: Panos Rontogiannis Date: Thu, 5 Jan 2023 13:06:56 +0200 Subject: [PATCH] add lower bound thresholds on BlackboxSslCertificateWillExpireSoon rules to avoid overlap --- _data/rules.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/_data/rules.yml b/_data/rules.yml index 49d3e39..4248818 100644 --- a/_data/rules.yml +++ b/_data/rules.yml @@ -389,15 +389,15 @@ groups: severity: critical - name: Blackbox SSL certificate will expire soon description: SSL certificate expires in 30 days - query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 30' + query: '86400 * 3 <= last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 30' severity: warning - name: Blackbox SSL certificate will expire soon description: SSL certificate expires in 3 days - query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 3' + query: '0 <= last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 3' severity: critical - name: Blackbox SSL certificate expired description: SSL certificate has expired already - query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() <= 0' + query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 0' severity: critical comments: | For probe_ssl_earliest_cert_expiry to be exposed after expiration, you