1st - Install the app, and restart Splunk
2nd - Configure the app by opening the app and navigating to setup
- Specify a host, index, and interval / cron schedule
- Unselect disabled
- Specify comma separated list of ssl certificates to monitor
- Click save
3rd - Restart Splunk or reload scripted inputs (./splunk reload exec)
4th - Setup your own Splunk searches, alerts, dashboards over index=indexName cert=*
Be sure the python scripts in /bin are executable ("chmod +x /path/to/ssl_checker/bin/.py")
Be sure to restart Splunk after configuration (Enables scripted inputs)
Check for logged errors ("index=_internal log_level=err OR log_level=warn ssl_checker")
Contact the author via contact link here on splunkbase or by tagging @jkat54 on answers.splunk.com
Fixed file permissions for nix users
Fixed issue with certs on caPaths not being correctly detected in automated detection mode
Added better Instructions to setup.xml
Removed index name from "Certificate Expiration Overview" dashboard underlying search
Added Automatic Discovery Mode
Added Certificate Expiration Overview dashboard
Changed default CRON schedules to 0 0 * * from * * * *
Added ssl.conf file & REST endpoints for managing SSL certificates
Added props.conf to force DATETIME_CONFIG = CURRENT
Added setup.xml for enabling inputs and setting paths to certificates on both Window & Linux systems
Changed interval to every minute on all inputs but they are disabled by default
Disabled inputs by default
Changed interval to 0 0 * * * on all inputs
Disabled logging of duplicate data to _internal index via splunk.mining.dcutils
-Updated example dashboard
-Fixed bug in setup.xml
-Python 3 Compatible
- Now with python 3 compatibility
- Roses are red, violets are blue, I like python 3, how about you?
Fixed file permissions for Linux users
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.