The SSH Client Action Plugin executes any arbitrary command or script on any SSH accessible remote machine. It can be used as an Incident Action plugin to perform some action on a remote machine as a result of an incident triggering.
SSH Action Plugin
dynaTrace >= 4.x
Joe Hoffman (firstname.lastname@example.org)
Ensures encrypted communication with remote machine
Executes any command or script
Open source: Adaptable as necessary
Uses the jsch (java Secure Channel) encryption package which is an implementation of SSH2
It accepts SSH connections from whatever responds on port 22 on the specified machine. This means that it could be vulnerable to a Man in the Middle attack. Therefore we suggest running it on and across only trusted networks.
This plugin requires an SSH service be running on the specified remote machine. FreeSSHd is a good option for any OS that does not have SSH natively.
Output from the executed command is written to the plugin log which can be found in the log directory of the Collector where the plugin is being executed.
Additional suggested Improvements
- Provide a switch to be able to disable logging for verbose commands
- Regex Match for output match
- Configurable as a task
- Success criteria
- Make the SSH port configurable
- Most of these features would be attainable by adding this SSH functionality to the Generic Execution Plugin and making the SSH feature optional.
Feel free to contribute any changes on Github