TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Steve,
You can get the RS engines to generate SNMP traps, as well as sending
events to consoles and logging to a database.
There is an ISS MIB which includes a branch for realsecure.
We're planning to do this. We WERE planning to do flood control at our
NOC based on the different events that realsecure generates, but our
management software tends to do flood control at trap OID level.
Realsecure uses a handful of generic trap OIDs (eg one trap for
high-priority events, one for medium-priority, one for low-priority)
passing event-specific information as variables for each trap.
You can also pull down COPIES of realsecure logs via enginemgr, in csv
format (you need to set a flag so as not to delete the sensor's copy
of the logs you download in this way). I think v5.5 enginemgr supports
realtime acceptance and logging of alerts but haven't tried that. In
fact i don't use the 'getcsv' feature at all but mention it in case
you find it useful. SNMP would be more standard.
Jason
On Fri, 4 May 2001 08:39:32 -0700, you wrote:
>
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
>----------------------------------------------------------------------------
>
>All,
>
>We are setting up a couple of remote RS engines and would like to feed the
>data back to a NOC. Is there any way to feed the data to a different
>monitoring setup such as BMC instead of the RS console?
>
>Thank-you
>
>Steve
>
>
>
Jason.Renard at Mail.Com
Warning - all views expressed are my own.
I cannot guarantee the accuracy of everything
I've said - use it at your own risk.
