prometheus-dnssec-exporter/dnssec.rules
2018-11-10 15:18:26 +01:00

20 lines
858 B
Plaintext

groups:
- name: prometheus/alerts/dnssec.rules
rules:
- alert: DNSSECSignatureExpiration
expr: dnssec_zone_record_days_left < 10
for: 1m
labels:
urgency: immediate
annotations:
description: The DNSSEC signature for the {{$labels.record}} in {{$labels.zone}} type {{$labels.type}}) expires in {{$value}} day(s)
title: The DNSSEC signature for the {{$labels.record}} in {{$labels.zone}} is expiring
- alert: DNSSECSignatureInvalid
expr: dnssec_zone_record_resolves == 0
for: 1m
labels:
urgency: immediate
annotations:
description: The DNSSEC signature for the {{$labels.record}} in {{$labels.zone}} type {{$labels.type}}) on resolver {{$labels.resolver}} is invalid
title: The DNSSEC signature for the {{$labels.record}} in {{$labels.zone}} on resolver {{$labels.resolver}} is invalid