Highlighted
Absent Member.
Absent Member.
114 views

Semi-Real-Time BSM SmartConnector

Hi,

I need to install BSM SmartConnector on one Solaris 10. but it will read BSM logs from another Solaris 10 (I will name it as client).

In the client we are not able to install anything and we cannot share bsm logs directory as NFS (because of security).

Does anyone have similar situation.

We are thinking to get the client bsm logs through SFTP script to the server where we have installed SmartConnector and then process them. We will have to copy, then rename it as .not_terminated, and then rename it again.

In this situation how can we monitor when SmartConnector finished reading the logs? We need to monitor it throught bash script. SmartConnector will be running all the time, we cannot stop and start it every time we copy the logs file.

With this deployment we are trying to have semi-real-time, so we will get new bsm audit file every (3-5 minutes).

Any idea will be welcome.

Thanks and regards.

Labels (1)
0 Likes
Reply
1 Reply
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Semi-Real-Time BSM SmartConnector

Hi Jose,

If I understood this correctly, all you want is to be able to monitor the connector so that you know when it has finished parser the log files. Is it correct?

If I remember correctly, the connector should generate an internal event saying it completed a file, you can use this event to track what the connector is doing.

Also, you can configure the connector to rotate and delete logs for you if required.

Vini

0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.