From 5b927d85bd12232697d28fe8e2cebc1b82d5ef6c Mon Sep 17 00:00:00 2001 From: Rob Best Date: Sun, 8 Dec 2019 20:40:43 +0000 Subject: [PATCH] fix example queries in README --- README.md | 46 +++++++++++++++++++++++++++------------------- 1 file changed, 27 insertions(+), 19 deletions(-) diff --git a/README.md b/README.md index a0ab607..a5192a5 100644 --- a/README.md +++ b/README.md @@ -8,21 +8,21 @@ Whatever it is, the SSL exporter gives you visibility over those dimensions at t ## Table of Contents - * [SSL Certificate Exporter](#ssl-certificate-exporter) - * [Building](#building) - * [Docker](#docker) - * [Flags](#flags) - * [Metrics](#metrics) - * [Prometheus](#prometheus) - * [Configuration](#configuration) - * [Targets](#targets) - * [Valid targets](#valid-targets) - * [Invalid targets](#invalid-targets) - * [Example Queries](#example-queries) - * [Client authentication](#client-authentication) - * [Proxying](#proxying) - * [Limitations](#limitations) - * [Acknowledgements](#acknowledgements) +- [SSL Certificate Exporter](#ssl-certificate-exporter) + - [Building](#building) + - [Docker](#docker) + - [Flags](#flags) + - [Metrics](#metrics) + - [Prometheus](#prometheus) + - [Configuration](#configuration) + - [Targets](#targets) + - [Valid targets](#valid-targets) + - [Invalid targets](#invalid-targets) + - [Example Queries](#example-queries) + - [Client authentication](#client-authentication) + - [Proxying](#proxying) + - [Limitations](#limitations) + - [Acknowledgements](#acknowledgements) Created by [gh-md-toc](https://github.com/ekalinin/github-markdown-toc) @@ -123,19 +123,27 @@ If neither are given, the exporter assumes a https connection on port `443` (the Certificates that expire within 7 days, with Subject Common Name and Subject Alternative Names joined on: - ((ssl*cert_not_after - time() < 86400 * 7) \_ on (instance,issuer_cn,serial_no) group_left (dnsnames) ssl_cert_subject_alternative_dnsnames) \* on (instance,issuer_cn,serial_no) group_left (subject_cn) ssl_cert_subject_common_name +``` +((ssl_cert_not_after - time() < 86400 * 7) * on (instance,issuer_cn,serial_no) group_left (dnsnames) ssl_cert_subject_alternative_dnsnames) * on (instance,issuer_cn,serial_no) group_left (subject_cn) ssl_cert_subject_common_name +``` Only return wildcard certificates that are expiring: - ((ssl_cert_not_after - time() < 86400 * 7) * on (instance,issuer_cn,serial_no) group_left (subject_cn) ssl_cert_subject_common_name{subject_cn=~"\\*.*"}) +``` +((ssl_cert_not_after - time() < 86400 * 7) * on (instance,issuer_cn,serial_no) group_left (subject_cn) ssl_cert_subject_common_name{subject_cn=~"\\*.*"}) +``` Number of certificates in the chain: - count(ssl_cert_subject_common_name) by (instance) +``` +count(ssl_cert_subject_common_name) by (instance) +``` Identify instances that have failed to create a valid SSL connection: - ssl_tls_connect_success == 0 +``` +ssl_tls_connect_success == 0 +``` ## Client authentication