About the Device
OpenManage Enterprise is a systems management and monitoring web application delivered as a virtual appliance. It provides a comprehensive view of the Dell EMC servers, chassis, storage, and network switches on the enterprise network.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Dell EMC |
Product Name | OpenManage Enterprise |
Type of Device | Hosted |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method |
|---|---|---|---|
Dell OpenManage | DELL_OPENMANAGE | Syslog - Structured | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Dell OpenManage | CyberHub | 601 (TCP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
To create an alert policy to forward logs to CyberHub
Start the supported web browser and enter the OpenManage Enterprise appliance IP address.
Log in using admin credentials.
In OpenManage Enterprise, select Alerts > Alert Policies > Create.
In the Create Alert Policy, in Name and Description, enter a name and description of the alert policy and click Next.
Click Category and select Application. In Application, select application category and all subcategories under application and click Next.
In Target, click Select Devices or Select Groups and then select the required devices or groups and click Next.
In Date and Time, retain default Date Range and Days and click Next.
By default, the alert policies are always active
In Severity, select All and click Next.
In Actions, select Syslog.
If Syslog servers are not configured in OpenManage Enterprise, click Enable and enter the CyberHub IP address in the DESTINATION ADDRESS/HOST NAME, and the default port number would be 514 and click Next.
In Summary, carefully read through the details of the alert policy you defined and click Finish.
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | Dell EMC OpenManage Enterprise interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |