Configuring Data Collection Integration with Security Code Products
Notation:
${LS_HOME} - Logstash home directory, usually /app/logstash
General Description
Data collection from Security Code products is configured through Smart Monitor Data Collector pipeline configurations.
Adding Variables to Keystore
To enable data collection, add variables with identification and authentication data to Smart Monitor Data Collector keystore.
| Name | Value |
|---|---|
| continent_bd.user | Username for connecting to Continent DB (APKSH 3.9) |
| continent_bd.password | Password for connecting to Continent DB (APKSH 3.9) |
| continent_bd.host | Continent DB host (APKSH 3.9) |
| continent_bd.port | Continent DB port (APKSH 3.9) |
| continent_bd.bd | Continent DB name (APKSH 3.9) |
| continent_snmp.user | Username for SNMP connection to APKSH |
| continent_snmp.auth_protocol | Authentication protocol for SNMP connection to APKSH |
| continent_snmp.password | Password for SNMP connection to APKSH |
| continent_snmp.security_level | SNMP security level on APKSH |
| sns_bd.user | Username for SNS DB connection |
| sns_bd.password | Password for SNS DB connection |
| sns_bd.host | SNS DB host |
| sns_bd.port | SNS DB port |
| sns_bd.bd | SNS DB name |
Example command for adding a variable to keystore:
sudo -u logstash ${LS_HOME}/bin/logstash-keystore add continent_bd.user
Installing Smart Monitor Data Collector Configurations
Configuration files (pipelines) are shipped with the module and require additional editing according to the addressing of your Smart Monitor and Security Code product installations.
In .conf files intended for data collection via SNMP from Continent devices, specify polled IP addresses:
hosts => [
{
host => "udp:IP_1/161"
version => "3"
retries => 5
timeout => 5000
},
{
host => "udp:IP_2/161"
version => "3"
retries => 5
timeout => 5000
},
...
]
In .conf files for syslog collection, specify the full path to the file where Rsyslog writes logs. Rsyslog configuration parameters are also defined in this module.
To install configuration files:
- Go to the
Smart Monitor Data Collectorhost. - Place
.confpipeline files and thebizonefolder with scripts into${LS_HOME}/config/conf.d. - Add pipelines to
pipelines.yml. For details, see Guide for creating a standard pipeline. - Restart
Smart Monitor Data Collectorusing:
systemctl restart logstash