Submit a ticketCall us

Bridging the ITSM Divide
Integrated help desk and remote support software for faster resolution

Join us on Wednesday, November 29, 2017 at 11 a.m. CT, as we discuss the benefits of effectively integrating your help desk software with remote support solutions to help increase the efficiency of IT administration, improve communication, and decrease mean time to resolution (MTTR) for IT issues of all sizes. This directly impacts end-user satisfaction and your business’ bottom line. Register Now.

Home > Success Center > Archive > 2017October31 - LEM Deletes > Manage connectors

Manage connectors

Created by Caroline Juszczak, last modified by Kevin.Swinson on Oct 31, 2017

Views: 45 Votes: 0 Revisions: 5

Use the Connector configuration form to:

  • Configure and manage the manager sensor, actor, and notification connectors.
  • Configure and manage the agent sensor and actor connectors.
  • Change the connectors configured in the agent Connectors Profile.

    To change a Connector Profile's membership and properties, edit the Connector Profile in the Build > Groups view.

You must be logged on to a Manager before you can configure its connectors or its Agents' connectors.

Open a connector configuration form

Use this form to add connector instances for each network security product or device the manager or agent monitors or interacts with on the manager computer.

Open a manager connector configuration form

  1. Log in to your targeted manager.
  2. In the LEM console, click Manage > Appliances.
  3. Locate your targeted manager in the Appliances grid.
  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and log in to the manager (if required).
  5. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Connectors.

    Use this form to add connector instances for each network security product or device the manager or agent monitors or interacts with on the manager computer.

Open an agent connector configuration form

  1. Log in to your targeted manager.
  2. In the LEM Console, click Manage > Nodes.
  3. In the Nodes grid, locate an agent.
  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Connectors.

    If the agent is not in a connector profile, the Connector Configuration for [Agent] form displays.

    If the Agent is in a connector profile, the Agent Connector Configuration prompt appears. A prompt warns you that the agent belongs to a connector profile.

Add a new connector instance

Use the Connector Configuration form to configure the connection settings for:

  • Each sensor that collects data from a network security product event logs.
  • Each actor that initiates an active response from a network security product or device.

Each sensor or actor connector configuration is a connector instance. Most products write to one log source and require a single connector instance. However, some products write to more than one log file. For these products, create separate connector instances for each log source. When a product requires more than one instance, you can differentiate between them by assigning each instance to a unique name called an alias.

  1. Open the connector configuration form for a manager or agent.
  2. Use the Refine Results pane to select a connector Category.
  3. In the Connectors grid, select a connector to configure.
    • The File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-BlueTool_21x20.png indicates a sensor connector.
    • The File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-OrangeTool_21x20.png indicates an actor connector.
  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select New.

    A form displays under the Connectors grid.

    The fields on the form vary for each connector. For new instances, the form displays the default connector settings required to configure the product or device. In most cases, you can save the connector with its default settings. However, you can change the settings as required.

  5. Complete the Properties form as required.

    Hover over each selection to view the tooltip.

  6. Click Save to save the connector configuration as a new connector instance.

    • If you configured a sensor, a sensor connector instance File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Cog.png icon displays below the connector.
    • If you configured an actor, an actor connector instance File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Lightening.png icon appears below the connector.
    • The File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Stop.png icon in the Status column indicates the connector instance is stopped. All new connector instances automatically have a Stopped status.
  7. Start the connector instance.

    Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Start.

    The system starts the connector instance, and the connector Status icon changes to a Started File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Play.png icon.

  8. Repeat steps three through seven for each additional connector instance required to integrate this product or device with the LEM.

Start a connector instance

When you finish adding or reconfiguring a connector instance, start the connector instance to enable the connector configuration.

When you start a sensor connector instance, the sensor starts monitoring the product event log. When you start an actor connector instance, the actor starts initiating active responses on the product when requested by policy.

  1. Open the connector configuration form for your targeted manager or agent.
  2. In the Connectors grid, select the connector instance you want to start.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Start.

    The system starts the connector instance, and the Status icon changes to a Started File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Play.png icon.

If the connector fails to start, the console displays a warning or failure event that describes the problem. Normally, connectors fail to start because:

  • The network security device log file does not exist.
  • The agent does not have permission to access the file.

Stop a connector instance

Stop a connector instance before you edit or delete a connector instance. This process prevents the connector from gathering data for the console and initiating active responses on a network security product or notification system. After a connector instance is stopped, you can edit, delete, or restart the instance as required. The connector instance remains stopped until you restart the instance.

  1. Open the Connector Configuration form for your targeted manager or agent.
  2. In the Connectors grid, select the connector instance you want to stop.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Stop.

    The system stops the connector instance, and the Status icon changes to a Stopped File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Stop.png icon.

Edit a connector instance

You can edit an existing connector instance configuration settings, but you cannot edit its name (alias). If you need to rename a connector instance alias, delete the current connector instance and create a new instance with the new name. You cannot edit the log file value for some Windows event log sensors.

  1. Open the Connector Configuration form for the targeted manager or agent.
  2. In the Connectors grid, select your targeted connector instance.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Stop.

    She system stops the connector instance, and the status icon changed to a Stopped File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Stop.png icon.

  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Edit.
  5. Update the connector settings in the Properties form as required.

  6. Click Save.

  7. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Start.

    The system starts the connector instance, and the Status icon changes to a Started File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Play.png icon.

Delete a connector instance

You can delete an obsolete or incorrect connector instance when required.

  1. Open the Connector Configuration form for the targeted manager or agent.
  2. In the Connectors grid, select the connector instance you want to delete.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Stop.

    The system stops the connector instance, and the Status icon changes to a Stopped File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Icon-Stop.png icon.

  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Delete.
  5. When prompted, click Yes to confirm the delete.

    The connector instance disappears from the Connectors grid.

    Do not recreate the connector until it is completely removed. This process may require up to two minutes to complete.

Create connector profiles to manage and monitor LEM agents

You can use connector profiles to manage and monitor similar LEM agents across your network. These profiles can assist you when you configure and manage connectors at the profile level to reduce the amount of work you have to do for large LEM agent deployments. You can also create filters, rules, and searches using your connector profiles as groups of LEM agents. For example, you can create a filter to display all web traffic from computers in your domain controller connector profile.

To create a connector profile using a LEM agent as a template:

  1. Configure the connectors on the LEM agent to use as the template for the new connector profile.

    These connectors are applied to any LEM agents that are added later to the Connector Profile.

  2. Click Build > Groups.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Plus(Gray)_14x11.png and select Connector Profile.
  4. Enter a name and description for the connector profile.
  5. Click the Template drop-down menu and select a template.
  6. Click Save.
  7. Add LEM agents to your new connector profile.
    1. Locate the new connector profile in the Groups grid.
    2. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear(Gray)_17x14.png and select Edit.
    3. Move the LEM agents from the Available Agents list to the connector profile.
    4. Click Save.

      The connector configurations set for the template agent will be applied to any agent added to the connector profile.

Use an agent to edit a connector profile

You can use an agent within a connector profile as a vehicle to edit the profile connector settings. You can add new connector instances to the profile, or edit or delete its existing instances. You can also edit a Connector Profile's connector settings from the Manage > Agents view.

Use caution when editing a connector profile, as our changes are applied to all agents in the profile.

  1. Open the Manage > Agents view.
  2. In the Agents grid, select the agent in the connector profile you want to edit.
  3. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/090/0P0/Button-Gear_16x13.png and select Connectors.

    The Agent Connector Configuration dialog box displays, warning you that the agent belongs to a connector profile.

  4. Click Connector Profile.

    The Connector Configuration for [Connector Profile]form appears.

  5. Add, edit, or delete the connector instances associated with the connector profile as required.
Last modified

Tags

Classifications

Public