Splunk Enterprise

SSL certificate check with SNI (Server Name Indication)

Andre_
Path Finder

Hi I am looking for a SSL Certificate check that does SNI.
I've tried Certificates-Expiry, I get results but doesn't support SNI.
Now I am trying SSL Certificate Lookup. The .py script seems to have provision for SNI but I am not getting any results nor any errors. Everything is empty.

| makeresults 
| eval url = "mywebsite.com"
| lookup sslcert_lookup dest AS url

What am I missing?

 

Cheers

Andre

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...