System administrators implemented a centralized monitoring system for over 7,000 SSL certificates using Zabbix and Netbox. The solution replaces manual tracking by aggregating certificate data from multiple Certificate Authorities into a single database, which is then processed via API requests.
The team initially attempted to have the Zabbix proxy pull data directly, but the volume of over 35,000 data points caused performance issues. To resolve this, they switched to Zabbix Trapper, which allows for efficient data transmission without overloading the proxy.
The monitoring workflow utilizes two scripts: one to fetch certificate data from Netbox and save it to a file, and another to send the data to Zabbix. The system tracks key parameters including expiration dates, issuer information, and domain names.
The Zabbix template includes three triggers based on the remaining certificate validity: medium severity at 28 days, high severity at 14 days, and emergency severity at 2 days. The setup requires matching the host name in the script with the Zabbix configuration.
