...
To create an alert policy to forward logs to CyberHub:
Start the supported web browser and in the Address box, enter the OpenManage Enterprise appliance IP address.
On the log in page, type the admin login credentials, and then click Log in.
On the OpenManage Enterprise Graphical User Interface (GUI), Select Log in using admin credentials.
In OpenManage Enterprise, select Alerts > Alert Policies > Create.
...
In the Create Alert Policy dialog box, in the Name and Description section, enter a name and description of the alert policy . Click and click Next.
...
In the Category section, expand Application and select the Click Category and select Application. In Application, select application category and all subcategories under application . Click and click Next.
...
In the Target section, please click Select Devices or Select Groups option and then select the required Devices or Groups from the left pane. Clickdevices or groups and click Next.
...
In Date and Time, retain default Date Range and Days and click Next.
By default, the alert policies are always active
...
...
In the Severity section, to select all the severity categories, select the All check box. Click All and click Next.
...
In the Actions section, select Syslog.
If Syslog servers are not configured in OpenManage Enterprise, click Enable and enter the CyberHub IP address in the DESTINATION ADDRESS/HOST NAME box, and the default port number would be 514 . Clickand click Next.
...
In the Summary section, carefully read through the details of the alert policy you defined are displayed. Please carefully read through the information. Clickand click Finish.
Integration Parameters
...
Property | Default Value | Description |
|---|---|---|
IP Address | Dell EMC OpenManage Enterprise interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |