icinga2-checks/check_curl.sh

446 lines
9.8 KiB
Bash
Raw Normal View History

#!/bin/bash
2023-04-21 23:54:17 -06:00
2023-06-15 13:32:23 -06:00
usage() {
echo "Usage: $0 -u <url> [-w <warning>] [-c <critical>] [-C <contains>] [-L] [-I] [-H <headers>] [-p] [-R] [-s]"
echo "[Arguments]:
-u Specify the URL to check (required).
-w Set the warn level for response time (default: 1 second).
-c Set the critical level for response time (default: 2 seconds).
-C If the body does not contain this string, return CRITICAL.
-L Follow redirects.
-I Insecure mode (--insecure).
-H Specify headers. Formatted like \"Header1: value,Header2: value\"
-p Print the curl command and exit
-R Set curl --resolve option.
2023-06-22 12:53:38 -06:00
-M Set the HTTP mode (default: GET)
-t Timeout in seconds
2023-11-23 21:41:05 -07:00
-s Ignore the response status code.
2024-03-30 20:16:18 -06:00
-e Expected status code.
2024-03-30 21:22:09 -06:00
-S Sanitize HTML when printing to console. Good for Icinga2 Web.
-n Don't return any perfdata if the status code was not 200."
2023-06-15 13:32:23 -06:00
exit 3
}
# Default values
2023-06-15 13:32:23 -06:00
WARN_TIME=700
CRIT_TIME=1000
FOLLOW_REDIRECTS=""
INSECURE=""
HEADERS=""
PRINT_CURL=""
RESOLVE=""
IGNORE_STATUS=""
TIMEOUT="30"
2023-06-22 12:53:38 -06:00
HTTP_METHOD="-X GET"
2023-11-23 21:41:05 -07:00
EXPECTED_STATUS_CODE=""
2024-03-30 20:16:18 -06:00
SANITIZE_HTML=false
2024-03-30 21:22:09 -06:00
DISABLE_PERFDATA=false
2023-04-21 23:54:17 -06:00
# Parse arguments
2024-03-30 21:22:09 -06:00
while getopts "u:w:c:C:LH:M:IpR:st:e:hSn" opt; do
2023-04-21 23:54:17 -06:00
case $opt in
2023-04-21 23:54:18 -06:00
u)
URL="$OPTARG"
2023-04-21 23:54:18 -06:00
;;
w)
WARN_TIME="$OPTARG"
2023-04-21 23:54:18 -06:00
;;
c)
CRIT_TIME="$OPTARG"
2023-04-21 23:54:18 -06:00
;;
C)
CRIT_STRING="$OPTARG"
;;
L)
2023-06-22 13:09:42 -06:00
FOLLOW_REDIRECTS="-L"
2023-04-21 23:54:18 -06:00
;;
I)
INSECURE="--insecure"
;;
H)
HEADERS="--header $OPTARG"
2023-04-21 23:54:18 -06:00
;;
p)
PRINT_CURL="yes"
2023-04-21 23:54:18 -06:00
;;
R)
RESOLVE="--resolve $OPTARG"
;;
s)
IGNORE_STATUS="yes"
;;
t)
TIMEOUT="--max-time $OPTARG"
2023-04-21 23:54:18 -06:00
;;
2023-06-22 12:53:38 -06:00
M)
HTTP_METHOD="-X $OPTARG"
;;
2023-11-23 21:41:05 -07:00
e)
EXPECTED_STATUS_CODE="$OPTARG"
;;
2023-06-15 13:32:23 -06:00
h)
usage
;;
2024-03-30 20:16:18 -06:00
S)
SANITIZE_HTML=true
;;
2024-03-30 21:22:09 -06:00
n)
DISABLE_PERFDATA=true
;;
2023-04-21 23:54:18 -06:00
*)
echo "Invalid option: -$OPTARG" >&2
2023-06-15 13:32:23 -06:00
usage
exit 3
2023-04-21 23:54:18 -06:00
;;
2023-04-21 23:54:17 -06:00
esac
done
# Check if URL is provided
2023-04-21 23:54:18 -06:00
if [ -z "$URL" ]; then
echo "Usage: $0 -u URL [options]"
exit 3
2023-04-21 23:54:17 -06:00
fi
# Prepare curl command
2023-06-22 12:53:38 -06:00
CURL_CMD="curl -w %{http_code};%{time_total} -o /dev/null -s $HTTP_METHOD $FOLLOW_REDIRECTS $INSECURE $HEADERS $RESOLVE $TIMEOUT $URL"
2023-04-21 23:54:19 -06:00
# Print curl command if requested
if [ "$PRINT_CURL" = "yes" ]; then
echo "$CURL_CMD"
exit 0
2023-04-21 23:54:19 -06:00
fi
2023-04-21 23:54:17 -06:00
# Execute curl command
CURL_OUTPUT=$($CURL_CMD)
CURL_EXIT=$?
# Parse curl output
HTTP_CODE=$(echo "$CURL_OUTPUT" | cut -d ';' -f 1)
2023-06-22 12:56:56 -06:00
RESPONSE_TIME=$(echo "$CURL_OUTPUT" | cut -d ';' -f 2 | xargs printf "%0.2f\n")
2023-04-21 23:54:18 -06:00
# Check curl exit status
if [ $CURL_EXIT -ne 0 ]; then
case $CURL_EXIT in
2023-04-21 23:54:19 -06:00
1)
msg="CRITICAL - Unsupported protocol"
;;
2)
msg="CRITICAL - Failed to initialize"
2023-04-21 23:54:19 -06:00
;;
3)
msg="CRITICAL - Malformed URL"
;;
4)
msg="CRITICAL - Feature or option not enabled"
;;
5)
msg="CRITICAL - Couldn't resolve proxy"
2023-04-21 23:54:19 -06:00
;;
6)
msg="CRITICAL - Could not resolve host"
2023-04-21 23:54:19 -06:00
;;
2023-05-03 12:33:44 -06:00
7)
msg="CRITICAL - Could not connect to host"
;;
8)
msg="CRITICAL - Unknown FTP server response"
;;
9)
msg="CRITICAL - FTP access denied"
;;
10)
msg="CRITICAL - FTP accept failed"
;;
11)
msg="CRITICAL - FTP weird PASS reply"
;;
12)
msg="CRITICAL - FTP timeout during active session"
;;
13)
msg="CRITICAL - Unknown response to FTP PASV command"
;;
14)
msg="CRITICAL - Unknown FTP 227 format"
;;
15)
msg="CRITICAL - FTP cannot get host"
;;
16)
msg="CRITICAL - HTTP/2 error"
;;
17)
msg="CRITICAL - FTP could not set binary"
;;
18)
msg="CRITICAL - Partial file"
;;
19)
msg="CRITICAL - FTP could not download/access the given file"
;;
# Skipping 20 as it is not used
21)
msg="CRITICAL - Quote error"
2023-05-03 12:33:44 -06:00
;;
2023-04-21 23:54:19 -06:00
22)
msg="CRITICAL - Server returned http code >= 400"
;;
23)
msg="CRITICAL - Write error"
;;
# Skipping 24 as it is not used
25)
msg="CRITICAL - Upload failed"
;;
26)
msg="CRITICAL - Read error"
;;
27)
msg="CRITICAL - Out of memory"
;;
28)
msg="CRITICAL - Operation timeout"
;;
# Skipping 29 and 30 as they are not used
31)
msg="CRITICAL - FTP could not use REST"
;;
# Skipping 32 as it is not used
33)
msg="CRITICAL - HTTP range error"
;;
34)
msg="CRITICAL - HTTP post error"
;;
35)
msg="CRITICAL - A TLS/SSL connect error"
;;
36)
msg="CRITICAL - Bad download resume"
;;
37)
msg="CRITICAL - Couldn't read the given file when using the FILE:// scheme"
;;
38)
msg="CRITICAL - LDAP cannot bind"
;;
39)
msg="CRITICAL - LDAP search failed"
;;
# Skipping 40 and 41 as they are not used
42)
msg="CRITICAL - Aborted by callback"
;;
43)
msg="CRITICAL - Bad function argument"
;;
# Skipping 44 as it is not used
45)
msg="CRITICAL - Interface error"
;;
# Skipping 46 as it is not used
47)
msg="CRITICAL - Too many redirects"
;;
48)
msg="CRITICAL - Unknown option specified to libcurl"
;;
49)
msg="CRITICAL - Malformed telnet option"
;;
# Skipping 50 as it is not used
51)
msg="CRITICAL - The server's SSL/TLS certificate or SSH fingerprint failed verification"
2023-04-21 23:54:19 -06:00
;;
52)
msg="CRITICAL - Server returned empty response"
;;
53)
msg="CRITICAL - SSL crypto engine not found"
;;
54)
msg="CRITICAL - Cannot set SSL crypto engine as default"
;;
55)
msg="CRITICAL - Failed sending network data"
2023-04-21 23:54:19 -06:00
;;
56)
msg="CRITICAL - Failure receiving network data"
;;
# Skipping 57 as it is not used
58)
msg="CRITICAL - Problem with the local certificate"
;;
59)
msg="CRITICAL - Couldn't use the specified SSL cipher"
2023-04-21 23:54:19 -06:00
;;
60)
msg="CRITICAL - SSL/TLS connection problem"
;;
61)
msg="CRITICAL - Unrecognized transfer encoding"
;;
# Skipping 62 as it is not used
63)
msg="CRITICAL - Maximum file size exceeded"
;;
64)
msg="CRITICAL - Requested SSL (TLS) level failed"
;;
65)
msg="CRITICAL - Sending the data requires a rewind that failed"
;;
66)
msg="CRITICAL - Failed to initialize the OpenSSL SSL Engine"
;;
67)
msg="CRITICAL - The user name, password, or similar was not accepted and curl failed to log in"
;;
68)
msg="CRITICAL - File not found on TFTP server"
;;
69)
msg="CRITICAL - Permission problem on TFTP server"
;;
70)
msg="CRITICAL - Out of disk space on TFTP server"
;;
71)
msg="CRITICAL - Illegal TFTP operation"
;;
72)
msg="CRITICAL - Unknown TFTP transfer ID"
;;
73)
msg="CRITICAL - File already exists (TFTP)"
;;
74)
msg="CRITICAL - No such user (TFTP)"
;;
# Skipping 75 and 76 as they are not used
77)
msg="CRITICAL - Problem with reading the SSL CA cert"
;;
78)
msg="CRITICAL - The resource (file) referenced in the URL does not exist"
;;
79)
msg="CRITICAL - An unspecified error occurred during the SSH session"
;;
80)
msg="CRITICAL - Failed to shut down the SSL connection"
;;
# Skipping 81 as it is not used
82)
msg="CRITICAL - Could not load CRL file, missing or wrong format"
;;
83)
msg="CRITICAL - TLS certificate issuer check failed"
;;
84)
msg="CRITICAL - The FTP PRET command failed"
;;
85)
msg="CRITICAL - RTSP, mismatch of CSeq numbers"
;;
86)
msg="CRITICAL - RTSP, mismatch of Session Identifiers"
;;
87)
msg="CRITICAL - Unable to parse FTP file list"
;;
88)
msg="CRITICAL - FTP chunk callback reported error"
;;
89)
msg="CRITICAL - No connection available, the session will be queued"
;;
90)
msg="CRITICAL - SSL public key does not match pinned public key"
;;
91)
msg="CRITICAL - Invalid SSL certificate status"
;;
92)
msg="CRITICAL - Stream error in HTTP/2 framing layer"
;;
93)
msg="CRITICAL - An API function was called from inside a callback"
;;
94)
msg="CRITICAL - Authentication error"
;;
95)
msg="CRITICAL - HTTP/3 layer error"
;;
96)
msg="CRITICAL - QUIC connection error"
;;
97)
msg="CRITICAL - Proxy handshake error"
;;
98)
msg="CRITICAL - A TLS client certificate is required but was not provided"
;;
99)
msg="CRITICAL - An internal call to poll() or select() returned error that is not recoverable"
2023-04-21 23:54:19 -06:00
;;
*)
echo "UNKNOWN - $CURL_EXIT -> $URL"
2023-04-21 23:54:19 -06:00
exit 3
;;
esac
echo "$msg -> $URL"
2023-04-21 23:54:19 -06:00
exit 2
fi
2023-04-21 23:54:18 -06:00
2023-11-23 21:41:05 -07:00
RESPONSE_TIME_MS=$(echo "$RESPONSE_TIME * 1000" | bc | xargs printf "%0.0f\n")
perfdata="response_time=${RESPONSE_TIME_MS}ms;${WARN_TIME};${CRIT_TIME};0;"
# Check HTTP code
2023-11-23 21:41:05 -07:00
if [ -n "$EXPECTED_STATUS_CODE" ]; then
if [ "$HTTP_CODE" -ne "$EXPECTED_STATUS_CODE" ]; then
echo "CRITICAL - server returned HTTP code $HTTP_CODE, expected $EXPECTED_STATUS_CODE -> $URL"
exit 2
fi
elif [ "$IGNORE_STATUS" != "yes" ] && [ "$HTTP_CODE" -ne 200 ]; then
2023-06-15 13:32:23 -06:00
echo "CRITICAL - server returned HTTP code $HTTP_CODE -> $URL"
exit 2
2023-04-21 23:54:17 -06:00
fi
# Check response time
2023-06-15 13:32:23 -06:00
if [ $(echo "$RESPONSE_TIME_MS > $CRIT_TIME" | bc) -eq 1 ]; then
echo "CRITICAL - Response time $RESPONSE_TIME seconds -> $URL | $perfdata"
exit 2
2023-06-15 13:32:23 -06:00
elif [ $(echo "$RESPONSE_TIME_MS > $WARN_TIME" | bc) -eq 1 ]; then
echo "WARNING - response time $RESPONSE_TIME seconds -> $URL | $perfdata"
exit 1
2023-04-21 23:54:17 -06:00
fi
2023-04-21 23:54:18 -06:00
# Check critical string
2024-03-30 21:27:07 -06:00
BODY_CONTAINS=""
if [ -n "$CRIT_STRING" ]; then
2024-03-30 21:27:07 -06:00
BODY=$(curl -s $FOLLOW_REDIRECTS $INSECURE "$HEADERS" $RESOLVE $TIMEOUT "$URL")
2023-11-23 21:48:45 -07:00
# shellcheck disable=SC2076
if ! [[ $BODY =~ "$CRIT_STRING" ]]; then
2024-03-30 20:28:59 -06:00
if $SANITIZE_HTML; then
BODY=$(echo "$BODY" | sed 's/</\&lt;/g' | sed 's/>/\&gt;/g')
fi
2024-03-30 20:16:18 -06:00
echo "CRITICAL - response body does not contain the required string: $BODY"
exit 2
2023-06-22 13:11:38 -06:00
else
2024-03-30 21:27:07 -06:00
BODY_CONTAINS=" and contained substring"
fi
fi
# All checks passed
2024-03-30 21:22:09 -06:00
if $DISABLE_PERFDATA && [ "$HTTP_CODE" != 200 ]; then
perfdata_str=""
else
perfdata_str="| $perfdata"
fi
2024-03-30 21:27:07 -06:00
echo "OK - response time was $RESPONSE_TIME seconds, code $HTTP_CODE${BODY_CONTAINS}. $perfdata_str"
exit 0