How to configure TIBCO LogLogic SEM appliance to be polled via SNMP for monitoring purposes
Article ID: KB0077394
Updated On:
| Products | Versions |
|---|---|
| TIBCO LogLogic Security Event Manager | all versions |
Description
If you want to monitor the LogLogic SEM appliance using software like Cacti, HP Openview, etc. using SNMP then you can follow the procedure below for configuring the SEM to accept polling via SNMP.
Issue/Introduction
This article explains how to configure LogLogic SEM to be monitored via SNMP-based network monitoring tools.
Resolution
1. Activate the SNMP service
a. Connect to the SEM server console in admin mode. The setup menu should be displayed.
b. Go to: "System Management" --> "System Service" --> "System Services activation" and choose the snmpd service as automatic services started.
c. Confirm and leave the setup menu
Comment: You can also use chkconfig to configure this service
2. Configure the SNMP Server
a. You should need to configure your SNMP Server (for example: community string, etc.) to communicate with our monitoring tool.
Edit the file: /etc/snmp/snmpd.conf (see man snmpd.conf for more information)
b. When you have finished, don't forget to restart the SNMP service:
/etc/init.d/snmpd restart
3. Modify iptables rules
a. Now you have to allow access to the remote machine which needs to be polled. Edit the file: /home/exaprotect/etc/sysconfig/iptables
Add this line to accept SNMP flow (port udp/161)
-A INPUT -p udp -m state --state NEW -m udp --dport 161 -j log_accept_2
b. Then copy the file:
cp /home/exaprotect/etc/sysconfig/iptables /etc/sysconfig/iptables
c. Finally, restart the iptables service:
/etc/init.d/iptables restart
a. Connect to the SEM server console in admin mode. The setup menu should be displayed.
b. Go to: "System Management" --> "System Service" --> "System Services activation" and choose the snmpd service as automatic services started.
c. Confirm and leave the setup menu
Comment: You can also use chkconfig to configure this service
2. Configure the SNMP Server
a. You should need to configure your SNMP Server (for example: community string, etc.) to communicate with our monitoring tool.
Edit the file: /etc/snmp/snmpd.conf (see man snmpd.conf for more information)
b. When you have finished, don't forget to restart the SNMP service:
/etc/init.d/snmpd restart
3. Modify iptables rules
a. Now you have to allow access to the remote machine which needs to be polled. Edit the file: /home/exaprotect/etc/sysconfig/iptables
Add this line to accept SNMP flow (port udp/161)
-A INPUT -p udp -m state --state NEW -m udp --dport 161 -j log_accept_2
b. Then copy the file:
cp /home/exaprotect/etc/sysconfig/iptables /etc/sysconfig/iptables
c. Finally, restart the iptables service:
/etc/init.d/iptables restart
Feedback
Yes
No
Powered by
