use last_over_time to make certificate rules less prone to flapping

This commit is contained in:
Panos Rontogiannis 2023-01-05 12:43:23 +02:00
parent 317bb2f76a
commit e10edaa8c4

View file

@ -389,15 +389,15 @@ groups:
severity: critical
- name: Blackbox SSL certificate will expire soon
description: SSL certificate expires in 30 days
query: 'probe_ssl_earliest_cert_expiry - time() < 86400 * 30'
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 30'
severity: warning
- name: Blackbox SSL certificate will expire soon
description: SSL certificate expires in 3 days
query: 'probe_ssl_earliest_cert_expiry - time() < 86400 * 3'
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 3'
severity: critical
- name: Blackbox SSL certificate expired
description: SSL certificate has expired already
query: 'probe_ssl_earliest_cert_expiry - time() <= 0'
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() <= 0'
severity: critical
comments: |
For probe_ssl_earliest_cert_expiry to be exposed after expiration, you