About the Device
OpenManage Enterprise is a systems management and monitoring web application delivered as a virtual appliance. It provides a comprehensive view of the Dell EMC servers, chassis, storage, and network switches on the enterprise network.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Dell EMC |
Product Name | OpenManage Enterprise |
Type of Device | Hosted |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method |
|---|---|---|---|
Dell OpenManage | DELL_OPENMANAGE | Syslog - Structured | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Dell OpenManage | CyberHub | 601 (TCP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
To create an alert policy to forward logs to CyberHub:
Start the supported web browser and in the Address box, enter the OpenManage Enterprise appliance IP address.
On the log in page, type the admin login credentials, and then click Log in.
On the OpenManage Enterprise Graphical User Interface (GUI), Select Alerts > Alert Policies > Create.
In the Create Alert Policy dialog box, in the Name and Description section, enter a name and description of the alert policy. Click Next.
In the Category section, expand Application and select the application category and all subcategories under application. Click Next.
In the Target section, please click Select Devices or Select Groups option and then select the required Devices or Groups from the left pane. Click Next.
By default, the alert policies are always active. Click Next on Date and Time section.
In the Severity section, to select all the severity categories, select the All check box. Click Next.
In the Actions section, select Syslog.
If Syslog servers are not configured in OpenManage Enterprise, click Enable and enter the CyberHub IP address in the DESTINATION ADDRESS/HOST NAME box, and the default port number would be 514. Click Next.
In the Summary section, details of the alert policy you defined are displayed. Please carefully read through the information. Click Finish.
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | Dell OpenManage interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |