Monitor SSL Certificate Expiry and Create Alerts in Dynatrace

[vikram_narawad1]

Summary: This thread describes how to monitor SSL certificate expiry in Dynatrace using synthetic monitors or built‑in certificate metrics. It explains alert configuration to prevent outages caused by expired certificates.

Need to monitor SSL certificate expiry and generate an alert for the same.

[AlexanderSommer · Accepted solution]

Can you please create a product idea for this use case with some details:
https://community.dynatrace.com/spaces/483/view.html

For example: Could we create a synthetic monitor and check for the certificate? Do you want to get the alert X-days before it expires or just if it is expired?

At the moment Dynatrace can't do that.

[vikram_narawad1]

Hi Alexander,

Could you please elaborate more on synthetic monitor. How can we create synthetic monitor for SSL certificate expiry check ?

Any example would be appreciated.

And yes we want an alert to be triggered atleast 2 days before expiry.

[Vikram_Narawade]

@Alexander S. :Could you please share your inputs on my above query. For creating a synthetic monitor we will need some URL to add, it would be good if you give some example so that i can replicate the same in my environment. Thanks

looping @Juliano C. who supports us in our program.

Regards,

Vikram

[juliano_costa]

Just to keep all the info within the same post, I'd like to add the Product Idea raised by Vikram regarding this topic:
https://community.dynatrace.com/content/idea/219003/view.html

[brayden_neale · Accepted solution]

Hi All,

You can now check SSL certificate expiry directly from Dynatrace synthetic HTTP monitors.
As of cluster version 1.2.12

[Bill_Demsky]

This works really well, but it would be good to be able to schedule the frequency for more than once an hour. Once a day or even once a week would be frequent enough to check for the certificate expiration. Can we get a longer time for these tests, please.

[Yosi_Neuman]

@Bill_Demsky totally agree with your request !

Till this request will be full fill you can try utilize Maintenance Window to suppress the running of synthetic checks.

Tried that and its look its working OK

Another way to run it every now and then will be by using API: Synthetic - On-demand monitor executions

HTH

Yos

[pahofmann · Accepted solution]

You can use the SSL cert check plugin my colleague @r_weber wrote.

[ctuttle48]

I would be nice if this was built into the full stack monitoring.