1st - Install the app, and restart Splunk
2nd - Setup your own Splunk searches, alerts, dashboards (see index=main by default)
3rd - Profit
Be sure the python scripts in /bin are executable ("chmod +x /path/to/ssl_checker/bin/.py")
Be sure to restart Splunk after configuration (Enables scripted inputs)
Check for logged errors ("index=_internal log_level=err OR log_level=warn ssl_checker")
Contact the author via contact link here on splunkbase or by tagging @jkat54 on community.splunk.com
Fixed file permissions for nix users
Fixed issue with certs on caPaths not being correctly detected in automated detection mode
Added better Instructions to setup.xml
Removed index name from "Certificate Expiration Overview" dashboard underlying search
Added Automatic Discovery Mode
Added Certificate Expiration Overview dashboard
Changed default CRON schedules to 0 0 * * from * * * *
Added ssl.conf file & REST endpoints for managing SSL certificates
Added props.conf to force DATETIME_CONFIG = CURRENT
Added setup.xml for enabling inputs and setting paths to certificates on both Window & Linux systems
Changed interval to every minute on all inputs but they are disabled by default
Disabled inputs by default
Changed interval to 0 0 * * * on all inputs
Disabled logging of duplicate data to _internal index via splunk.mining.dcutils
-Removed setup page from nav
-Disabled visibility
-Added new ssl keys
Version 4.1.1.:
Resolves issue #1 and #2
Change Log v4.1.0:
-Updated example dashboard to address jQuery vuln
-Changed to fully automated, just install and profit now
-Removed setup page and ability to manually specify locations of certs to scan
-Additional python3 & cloud compatibility fixes
-Added app manifest to define workloads
-Added sc_admin permission to view/edit
-Updated example dashboard
-Fixed bug in setup.xml
-Python 3 Compatible
Fixed file permissions for Linux users
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.