nessus_exporter/nessus_alert_rules.yml at main · giterlizzi/nessus_exporter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
groups:
  - name: nessus.rules
    rules:
      - alert: NessusDown
        expr: up{job="nessus"} == 0
        for: 2m
        labels:
          severity: critical
        annotations:
          summary: "Nessus exporter is down"
          description: "The Prometheus exporter for Nessus is not reachable for more than 2 minutes."
      - alert: NessusHighCPU
        expr: nessus_health_nessus_cpu > 85
        for: 5m
        labels:
          severity: warning
        annotations:
          summary: "High Nessus CPU usage"
          description: "Nessus is using more than 85% CPU."
      - alert: NessusLowDiskSpace
        expr: nessus_health_nessus_data_disk_free < 1024
        for: 5m
        labels:
          severity: warning
        annotations:
          summary: "Low disk space for Nessus data directory"
          description: "Less than 1 GB of space left in Nessus data directory."
      - alert: NessusLicenseAboutToExpire
        expr: (nessus_license_expiration_date - time()) < 86400 * 7
        labels:
          severity: warning
        annotations:
          summary: "Nessus license expires in less than 7 days"
          description: "Check and renew the license before it expires."
      - alert: NessusLicenseQuotaExceeded
        expr: (nessus_license_ips_used / nessus_license_ips_total) * 100 > 90
        for: 10m
        labels:
          severity: warning
        annotations:
          summary: "Nessus IP license usage above 90%"
          description: 'Nessus license is near its IP limit. Usage: {{ $value | printf "%.0f" }}%.'
      - alert: NessusScanInProgress
        expr: nessus_scan_running_scan > 0
        for: 5m
        labels:
          severity: info
        annotations:
          summary: "Nessus scan in progress"
          description: "A Nessus scan is currently in progress. Monitor the scan status for completion."
      - alert: NessusPluginUpdatesAvailable
        expr: nessus_plugin_updates_available > 0
        for: 5m
        labels:
          severity: info
        annotations:
          summary: "Nessus plugin updates available"
          description: "There are updates available for Nessus plugins. Consider updating to the latest version."
      - alert: NessusPluginSetOutdated
        expr: time() - nessus_plugin_set_timestamp_seconds > 30 * 86400
        for: 5m
        labels:
          severity: warning
        annotations:
          summary: "Nessus plugin set is older than 30 days"
          description: >
            The Nessus plugin set is older than 30 days.