StoneBlog.stonesoft.com

Third Party Monitoring feature was originally published in StoneGate 5.0 version and it got already many new configuration options in StoneGate 5.1. Surprise, surprise we have continued improving the Third Party Log Event management features even further in StoneGate 5.2.

The logging profile editor has been updated in SMC 5.2. There are now efficient and easy to use tools for defining how the 3rd party log data is parsed to be displayed in StoneGate Log Browser. You just need to have sample data in syslog format to start configuring the logging profile for the device.

Each row in the logging profile editor represents different logging pattern. If all patterns begin with same log field sequence, you can place that part in prefix field. Selecting the correct StoneGate log field is now supposed to be easier – just press Ctrl-Space while editing the patterns. There is also a new combo box that defines the default action for unmatched logging pattern. This gives you the possibility to filter away all those messages you don’t want to see in the StoneGate Log Browser.

Administrators can also receive SNMP traps from 3rd party devices and view them from StoneGate Log Browser. That is configured with a single checkbox from Host/Router properties. SNMP trap messages are shown in the Log Browser and once you select that kind of log event, you can see the values for OIDs in the Fields panel.

Note that if you want to view the OID’s name and description you need to import the MIBs to SMC. You can find the Import MIB action for example from File – Import menu.

written by Tero Jantunen - 1,636 views \\ tags: 3rd party devices, 5.2, Feature Previews, Logging Profiles. Syslog, Monitoring, SMC, SNMP traps, Third-Party Monitoring