Forum Discussion

Manobharu_21034's avatar
Manobharu_21034
Icon for Nimbostratus rankNimbostratus
Jul 07, 2015

Require assistance in configuring monitoring for ssl CERTIFICATE EXPIRATION

Hi All,

 

We are having SSL certificates expiring this August.We are having Nimsoft as monitoring tool in our environment. Kindly let us know how to generate a log in LB itself for SSL certificate expiration along with the expiry date so that we will confgure our monitoring tool with the help of keyword generating in the log.

 

Thanks in Advance........

 

Regards, Nani

 

application delivery
availability
deployment
LTM
monitor
TMSH

2 Replies

  • OTS02's avatar
    OTS02
    Icon for Cirrus rankCirrus
    Jul 07, 2015

    The LTM sends out syslogs 1 month in advance of certificate expiration. I don't know if Nimsoft accepts syslogs or not. pre 11.X versions of bigip required manually editing a config file (snmpdaemon I think), but in 11.X, just configure it in the GUI.

     

    To send to a syslog server in the GUI: System, Configuration, remote logging drop-down. BTW, the cert expiration logs are "warning tmsh" level.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Jul 07, 2015

    Please find the below methods. its very handy.

        Method 1:
    https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html

    Method 2:
    https://devcentral.f5.com/questions/how-to-alert-before-ssl-certificate-expire