Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Administration Manual

Page: 119 / 168

Configuring Rules 119
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
6 Select the Send SNMP Trap action type.
The
SNMP screen appears.
7 Specify an action name. The action name should be unique.
8 Specify the IP address or hostname of the SNMP server you want to send the trap.
9 Specify the port number for the SNMP server. The default port is 162.
If required, click
Test to validate the hostname or IP address and port number.
10 Specify the community string (password) to access the SNMP management system. If no
community string is specified, the Integrator sets the default value to public.
11
Specify the desired asnl object ID you want to associate with this message. If no Object ID is
specified, the Novell Audit internal OID is used (2.16.840.1.113719.1.347.3.1).
12 Click Save . If the action is configured, a
Successfully Added Action
message is displayed.
The newly created action appears under the Actions tab.
Sending the Events to a Sentinel Link
Sentinel Link provides the ability to hierarchically link multiple Sentinel systems, including Sentinel
Log Manager and the two Sentinel SIEM (Security Information Event Management) systems,
Novell Sentinel and Novell Sentinel Rapid Deployment (RD) systems. Sentinel Link provides
several benefits:
Š
Several Sentinel Log Managers can be linked in a hierarchical manner. Regional or distributed
Sentinel Log Manager servers can manage a large volume of data, retaining raw data and event
data locally, while also forwarding important events to a central Log Manager for
consolidation.