Provides sslcert_lookup, an external lookup that when given an IP or domain (works with SNI) and optionally port from an existing search, can give enrich the search by finding values from an SSL certificate like CN , SAN (Subject Alternative Names), and expiration. This can be handy for several use cases like looking for certificate expiration or discovering what site may be at an IP address.
(0)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources