Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

About the Device

OpenManage Enterprise is a systems management and monitoring web application delivered as a virtual appliance. It provides a comprehensive view of the Dell EMC servers, chassis, storage, and network switches on the enterprise network.

Device Information

 Entity

Particulars

Vendor Name

Dell EMC

Product Name

OpenManage Enterprise

Type of Device

Hosted

Collection Method

Log Type

 Ingestion label

Preferred Logging Protocol - Format

Log collection method

Dell OpenManage

DELL_OPENMANAGE

Syslog - Structured

CyberHub

Port Requirements

Source

Destination

Port

Dell OpenManage

CyberHub

601 (TCP)

To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.

While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.

In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.

Device Configuration

To create an alert policy to forward logs to CyberHub:

  1. Start the supported web browser and in the Address box, enter the OpenManage Enterprise appliance IP address.

  2. On the login page, type the admin login credentials, and then click Log in.

  3. On the OpenManage Enterprise Graphical User Interface (GUI), Select Alerts > Alert Policies > Create.

image-20240510-161120.pngScreenshot 2023-05-29 112547.png
  1. In the Create Alert Policy dialog box, in the Name and Description section, enter a name and description of the alert policy. Click Next.

Screenshot 2023-05-29 112613.png
  1. In the Category section, expand Application and select the application category and all subcategories under application. Click Next.

image-20230529-031559.png
  1. In the Target section, please click Select Devices or Select Groups option and then select the required Devices or Groups from the left pane. Click Next.

Screenshot 2023-05-29 112918.png
  1. By default, the alert policies are always active. Click Next on Date and Time section.

Screenshot 2023-05-29 113050.png
  1. In the Severity section, to select all the severity categories, select the All check box. Click Next.

Severity.png
  1. In the Actions section, select Syslog.

    1. If Syslog servers are not configured in OpenManage Enterprise, click Enable and enter the CyberHub IP address in the DESTINATION ADDRESS/HOST NAME box, and the default port number would be 514. Click Next.

  2. In the Summary section, details of the alert policy you defined are displayed. Please carefully read through the information. Click Finish.

Integration Parameters

Parameters required from customer for Integration.

Property

Default Value

Description

IP Address

Dell OpenManage interface IP address

Hostname or IP address of the device which forwards logs to the CyberHub

  • No labels