Multiple 443 SSL Certificates?
I was asked by someone why one of their servers is showing the normal HTTPS cert info, but some other certs (two Intune Connector certs which are also associated with port 443) are not showing up in LogicMonitor. I dug into the code for SSL_Certificates and I can see from the code in Active Discovery that it can see multiple certs, or it looks at all peerCertificates and generates an instance from the soonest to expire peerCertificate on that port, but doesnt generate an instance for all of them. If I'm interpreting it correctly. I do have the latest version of the LogicModule so I'm guessing we are out of luck. I might write a custom one that shows each cert that comes back from session.getPeerCertificates() as a separate instance. I mean, assuming the contents of session.getPeerCertificates() is what the code implies. I will check shortly. But in the meantime, I was wondering if there happened to be any datasources or logicmodules for Intune Connector certs or other information? Or am I completely off-base here? Thanks!48Views0likes2CommentsPulling all certificates from internal CA
I am just asking the general question to see if anyone has accomplished this before I recreate the wheel for our environment. Let me start out with my scripting knowledge is very basic. So what i am trying to accomplish is to pull all certificates signed by our internal CA, that would be pull every day in case new ones are added. The certificates that are about to expire with 30 days, 2 weeks, 1 week would send out alerts to the corresponding escalation chain (once i find out who owns the certificate). Eventually we would have service now create a ticket for the expiring certificate and route to the correct team. The biggest issue is i have no idea what all certificates we have or where they live. I know you can use certutil to grab this data from our internal CA but just wanted to see if any one has already accomplished this or maybe someone figured out an easier way. I havent found anything in the community pointing towards what I'm trying to do, Sorry in advance if i completely missed it or did not understand because of my lack of knowledge.Solved509Views12likes1CommentPalo Alto Improvements
Here are some datasources we added to get better information on Palo Alto firewalls: Certificate Status: KFWLJ9 High Availability Detail: EMXWRR (this one includes a bunch of HA info, including HA link status, compat status and so forth. Many auto properties for reference on the local and peer units. All datapoints currently use the default alert templates, but I am hoping to extend that and leverage the auto properties for those messages) Support Status: 3YJJCZ License Status: DXEAP4 All use the XML API, so will require security review (no idea how long that takes).290Views9likes18CommentsCertificate Expiration Notification
Can LogicMonitor notifiy us of certificates on a server that are about to expire? We have several management webservers. You know the type, internal, only used for IT or small department. It may be to manage "X" tool. They all have certificates. I don't care enough about the web server to set up web monitoring but I do monitor the server itself as it is usually a Windows server with several applications on it. Is there a way for logicmonitor to monitor if the certificate is going to expire on the server?20Views0likes2Comments