Alerting

How to setup certification expiry alert?

Khanu89
Path Finder

I have a dashboard for all SSL certifications. I'd like to setup few alerts for renewal reminds from Splunk. My current query is as shown below:

Index=epic_ehr source=C:\\logs\certs\\results.json

|Search validdays<60 |table hostname,validddays,issuer,commonName

My custom trigger condition is: search validdays="*" AND count<273

 

When I run this I am seeing results but no alert is triggered nor do I receive any email. please assist

Labels (3)
0 Karma
1 Solution

Khanu89
Path Finder

I was able to self resolve this query! Thanks for taking a look.

View solution in original post

0 Karma

Khanu89
Path Finder

I was able to self resolve this query! Thanks for taking a look.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@Khanu89 - Can you please specify the details of fields you have in your data? And also how you are writing the condition you mentioned? What is the count field in the condition?

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...