Forum Discussion

Manobharu_21034's avatar
Manobharu_21034
Icon for Nimbostratus rankNimbostratus
Jul 07, 2015

Require assistance in configuring monitoring for ssl CERTIFICATE EXPIRATION

Hi All,

 

We are having SSL certificates expiring this August.We are having Nimsoft as monitoring tool in our environment. Kindly let us know how to generate a log in LB itself for SSL certificate expiration along with the expiry date so that we will confgure our monitoring tool with the help of keyword generating in the log.

 

Thanks in Advance........

 

Regards, Nani

 

2 Replies

  • The LTM sends out syslogs 1 month in advance of certificate expiration. I don't know if Nimsoft accepts syslogs or not. pre 11.X versions of bigip required manually editing a config file (snmpdaemon I think), but in 11.X, just configure it in the GUI.

     

    To send to a syslog server in the GUI: System, Configuration, remote logging drop-down. BTW, the cert expiration logs are "warning tmsh" level.

     

  • Please find the below methods. its very handy.

        Method 1:
        https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html
    
        Method 2:
        https://devcentral.f5.com/questions/how-to-alert-before-ssl-certificate-expire