Security Compliance

Integrate SEM with Lenovo Networking Operating System software

This article provides an overview of a successful integration with Lenovo Networking Operating System software (NOS) Syslog service.

First published date

5/10/2019 2:04 PM

Last published date

5/10/2019 2:04 PM

Overview

Integrate Security Event Manager (formerly Log & Event Manager) with Lenovo Networking Operating System software (NOS) syslog service.

Product section

Security Event Manager

Resolution

For assistance in configuring SEM as a syslog server for the device, please review the appropriate manual pages or contact Lenovo support. the following resources may be helpful on this topic:

Lenovo Network Application Guide (© Copyright Lenovo 2018, https://systemx.lenovofiles.com/help..._10-9_rev1.pdf, obtained on 28/02/2019)
Lenovo Support (© Copyright Lenovo 2018, https://support.lenovo.com/ie/en/, obtained on 28/02/2019)

Lenovo environments

Lenovo Networking Operating System Software (NOS) version 10.4+
Lenovo ThinkSystem NE1032T RackSwitch

SEM side configuration

The syslog format is the same as for most Cisco devices, so you should make note of the syslog facility configured in the previous step, and then configure the connector named Cisco PIX and IOS for this logging facility.

SEM HTML5 console (versions 6.6 and newer)

In the SEM Events Console, navigate to Node > Manager Connectors.
Find the connector to configure. Type part of the connector name (Cisco PIX) in the search box, or use the filter menus in the Refine Results panel.
Select the connector, and then click Add Connector
Complete the connector configuration form. The following fields are common across most connectors:
- Name: Enter a user-friendly label for your connectors.
- Log File: Enter the location of the log file that the connector will normalize. This is a location on either the local computer (Agents), or the SEM appliance (non-Agent devices).
- Output: Normalized, Raw + Normalized, Raw. You only need to configure these values if SEM is configured to save raw (unnormalized) log messages.
Click Add.
Under Configured connectors, select your connector, and then click Start

SEM Flash console

For more information on what a connector is and how to configure one for normalizing your logs, see the following articles:

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.