Security

PKI and Splunk: Pulling Certificate Attributes

itsmevic
Communicator

What logs (if any) would contain the anatomy of a Certificate? In particular the "Valid from", "Issued to", "Issued by" and "Certification status" attributes?

0 Karma

wmyersas
Builder

What certificate(s) are you trying to get details on?

From what source(s)?

Are you collecting them from any inputs.conf anywhere?

0 Karma

itsmevic
Communicator

Hi, thanks for responding wmyersas. My question is more centered around whether or not there are logs that would produce those fields within the certificate itself that I could pull into Splunk?

0 Karma
Get Updates on the Splunk Community!

New Cloud Intrusion Detection System Add-on for Splunk

In July 2022 Splunk released the Cloud IDS add-on which expanded Splunk capabilities in security and data ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...