Enterasys Security Information and Event Manager, Configuration Manual

Page: 152 / 426

Configuring DSMs
136 IBM
Configuring SNMP
Services
To configure SNMP services:
NOTE
Configurations may vary depending on your environment. See your vendor
documentation for more information.
Step 1
Open the Domino Administrator utility and authenticate with administrative
credentials.
Step 2
Click on the Files tab, and the Monitoring Configuration (events4.nsf) document.
Step 3
Expand the DDM Configuration Tree and select DDM Probes By Type .
Step 4
Select Enable Probes , and then select Enable All Probes In View .
NOTE
You may receive a warning after performing this action. This is a normal result, as
some of the probes require additional configuration.
Step 5
Select DDM Filter .
You can either create a new DDM Filter or edit the existing DDM Default Filter.
Step 6
Apply the DDM Filter to enhanced and simple events. Choose to log all event
types.
Step 7
Depending on the environment, you can choose to apply the filter to all servers in a
domain or only to specific servers.
Step 8
Click Save . Close when finished.
Step 9
Expand the Event Handlers tree and select Event Handlers By Server.
Step 10
Select New Event Handler.
Step 11
Configure the following parameters:
•
Basic - Servers to monitor: Choose to monitor either all servers in the domain
or only specific servers.
•
Basic - Notification trigger: Any event that matches the criteria.
•
Event - Criteria to match: Events can be any type.
• Event - Criteria to match: Events must be one of these priorities (Check all the
boxes).
• Event - Criteria to match: Events can have any message.
•
Action - Notification method : SNMP Trap.
•
Action - Enablement : Enable this notification.
Step 12
Click Save . Close when finished.
Step 13
You are now ready to configure the log source in SIEM.