Getting Data In

Is it possible to monitor F5 load balancer ssl certificates using Splunk?

joe06031990
Communicator

Hi,

Is it possible to monitor F5 load balancer ssl certificates using Splunk?

 

Thanks.

0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

Splunk as such is not monitoring any particular equipment or solutions. Splunk ingests events (there can be ready-made add-ons for retrieving data from some types of sources) and can act on them.

So as long as you can provide splunk with the information regarding F5 certificates splunk can alert you if that information fulfills some conditions (like expiration data being in a near future). But the first thing to do is to get that information into splhnk.

As far as I can see, F5 add-on which you can install on your splunk infrastructure can pull some configuration data from F5 boxes but I have no idea if it contains certificate data. If it doesn't, you'd have to develop your own scripted or modular input that would  pull that information from F5 or find a way for F5 to push that data to splunk (over syslog or other protocol).

View solution in original post

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Splunk as such is not monitoring any particular equipment or solutions. Splunk ingests events (there can be ready-made add-ons for retrieving data from some types of sources) and can act on them.

So as long as you can provide splunk with the information regarding F5 certificates splunk can alert you if that information fulfills some conditions (like expiration data being in a near future). But the first thing to do is to get that information into splhnk.

As far as I can see, F5 add-on which you can install on your splunk infrastructure can pull some configuration data from F5 boxes but I have no idea if it contains certificate data. If it doesn't, you'd have to develop your own scripted or modular input that would  pull that information from F5 or find a way for F5 to push that data to splunk (over syslog or other protocol).

0 Karma

joe06031990
Communicator

Thanks thought as much.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...