Versions Compared

Old Version 1

changes.mady.by.user Miguel Lauriano

Saved on

compared with

New Version Current

changes.mady.by.user Aparna Rr

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

HPE iLO server management software that enables you to securely configure, monitor, and update your HPE servers seamlessly, from anywhere in the world. HPE iLO provides you with the tools to manage your servers efficiently, resolve issues quickly, and keep your business running – from anywhere in the world.

Device Information

 Entity

Particulars

Vendor Name

HPE

Product Name

Integrated Lights-Out

Type of Device

Hosted

Collection Method

Log Type

 Ingestion label

Preferred Logging Protocol - Format

Log collection method

HPE ILO

HPE_ILO

Syslog - Unstructured

CyberHub

Port Requirements

Source

Destination

Port

HPE ILO

CyberHub

514 (UDP)

To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.

...

Device Configuration

Pre-Requisites:

  • An iLO License that supports this feature should be installed.

  • Logged User should have Configure iLO Settings privilege.

  • Authentication Failure Logging setting should be enabled to get Authentication Failed logs.

To Configure and Enable Logging Criteria

The Authentication Failure Logging setting settings allows you to configure logging criteria for failed authentications and it should be enabled. Kindly find steps to enable and configure this.

  1. Log in to iLO Web Interface.

  2. Click Security in the navigation tree, and then click the >Access Settings tab.

  3. Update the Authentication Failure Logging by selecting Enabled-Every Failure setting.

  4. Click Apply.

Kindly follow below steps to To allow iLO to send event notification messages to CyberHub.

  1. Log in to iLO Web Interface.

  2. Click Managementin the navigation tree, and then click the > Remote Syslog tab.

  3. Set the Click Enable iLO Remote Syslog option to enabled.

  4. Enter the following information:
    • Remote Syslog Server - <CyberHub IP Address>
    • Remote Syslog Port - 514

  5. To send a test message to the configured syslog server, click Send Test Syslog. This button is available visible only when iLO Remote Syslog is enabled.

  6. To save the changes, click Click Apply.

Integration Parameters

Parameters required from customer for Integration.

Property

Default Value

Description

IP Address

HPE ILO interface IP address

Hostname or IP address of the device which forwards logs to the CyberHub