Defense.com

If your collector stops logging into our SIEM platform we may ask you to check the expiry date of your Java KeyStore (JKS) file (keystore.jks). This file stores the certificate for the secure connection between your collector and our SIEM platform. Without a valid keystore file, we won't be able to receive any logs from your collector.

To check the expiry date of your keystore.jks, you can use the keytool command that comes with the Java Development Kit (JDK). Here are the steps:

First, we need your keystore password, this will be found in your 90-output.conf file which should be in the default location: 

C:\Program Files\logstash\config\pipeline\

 Make a note of the password displayed on the following line:

We now need to run Keytool from the Windows Command prompt to check the expiry.

Launch Command Prompt by pressing Windows Key + R to open the Run window.

In Command Prompt navigate to the logstash Java Development Kit (JDK) location:

From the above location run the following command:

./keytool -list -v -keystore "c:\program files\logstash\config\certs\keystore.jks" -storepass &lt;password&gt;

Look for the Valid from and until fields in the output. The until field will show you the expiry date of the keystore file.

___________________________________________________________

 That's it! 🎉You now have the expiry date of your keystore.jks file.

1. First, we need your keystore password, this will be found in your 90-output.conf file which should be in the default location: 
 
 C:\Program Files\logstash\config\pipeline\
 
2. Make a note of the password displayed on the following line:
 
 ssl_keystore_password =&gt; ""
 
3. We now need to run Keytool from the Windows Command prompt to check the expiry.
 
4. Launch Command Prompt by pressing Windows Key + R to open the Run window.
 Type cmd and press Enter.
 
5. In Command Prompt navigate to the logstash Java Development Kit (JDK) location:
 
 C:\Program Files\logstash\jdk\bin
 
6. From the above location run the following command:
 
 ./keytool -list -v -keystore "c:\program files\logstash\config\certs\keystore.jks" -storepass &lt;password&gt;
 
 
 
7. Look for the Valid from and until fields in the output. The until field will show you the expiry date of the keystore file.
 
 ___________________________________________________________
 
 That's it! 🎉You now have the expiry date of your keystore.jks file.

In this guide we'll take you through the steps to check the expiry of your keystore.jks file on Windows.