TLS 证书数据采集

简介

采集 X509 证书相关信息上报到 DataFlux 中

前置条件

已安装 DataKit（DataKit 安装文档）

配置

进入 DataKit 安装目录下的 conf.d/tls 目录，复制 x509_cert.conf.sample 并命名为 x509_cert.conf。示例如下：

# Reads metrics from a SSL certificate
[[inputs.x509_cert]]
  ## List certificate sources
  sources = ["/etc/ssl/certs/ssl-cert-snakeoil.pem", "https://example.org:443"]

  ## Timeout for SSL connection
  # timeout = "5s"

  ## Pass a different name into the TLS request (Server Name Indication)
  ##   example: server_name = "myhost.example.org"
  # server_name = "myhost.example.org"

  ## Optional TLS Config
  # tls_ca = "/etc/telegraf/ca.pem"
  # tls_cert = "/etc/telegraf/cert.pem"
  # tls_key = "/etc/telegraf/key.pem"

配置好后，重启 DataKit 即可生效

采集指标

x509_cert

指标	类型	单位	Tag
verification_code	int	-	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san
verification_error	string	-	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san
expiry	int	seconds	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san
age	int	seconds	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san
startdate	int	seconds	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san
enddate	int	seconds	source，organization，organizational_unit，country，province，locality，verification，serial_number，signature_algorithm，public_key_algorithm，issuer_common_name，issuer_serial_number，san