Register a collector After the collector is configured (), it must be associated with the correct tenant in order to start to send logs. You can do this operation in two ways: Registration using key If the SGBox manager provides you the key you can register the collector using the CLI. You have to connect […]
Create new tenant admin An SGBox admin can monitor more than one tenant at time, usually is used by resellers or SOC analysts to monitor their customers. You cannot make configuration changes from here, just create aggregated dashboard or views on managed tenants.To create a new SGBox admin login as SGBox manager on “sgbox” tenant. […]
Create new Tenant As SGBox manager login with the credential configured during the wizard and specify “sgbox” as tenant. From SCM > Multi tenant > Manager select in the top right LICENSE STATUS. A new tenant should be available. If no tenants are availables you must ask for a new license to the sales team with the new tenant added. Upload the […]
Directory Import This feature is used to upload file to SGBox using SFTP or SMB protocol. Requirements: SGBox version 5.1.0 First of all check your connection with log user. Credential has been set during the first wizard. From a terminal like software (PuTTY). Move from the local folder to the “import” directory and create the […]
SGBox Alerts In order to guarantee the correct health of SGBox system, you can set different alerts: Requirements: A mail server must be configured: Configure a mail server Connect at the SGBox web interface on SCM > Advanced Options Disk Full: send an alert if the threshold is exceeded Load Average: send an alert if […]
Use Playbooks to retrieve logs (alternative mode) Sometimes the application insert some junk information that are not useful in the logs. Here a description on how to collect the important information: In our example there are some values like: current_link, next_link and last_log_item_generation that are excluded Last start key: means the array where our values […]
The custom ping script Sometimes is needed modify the default value of a script. For example the ping. Below is explained how to do that with fixed or variable values. Requirements: the host must be present in the section SCM > Network > Host. Connect at the SGBox web interface on SM > Configuration > […]
Configuration You can configure the SGBox network configuration using this tool. Connection method: SSH Hypervisor Console Connect via ssh (using a program like Putty) to SGBox specifying the user cli. If you haven’t changed them through the wizard, the default credentials are: user: cli pass: CL1changePW Choose Network management Configure SGBox interfaces This option allows […]
SGBox Troubleshoot There are some tools you can use via CLI in order to check if there are some problems to receive or visualize data.Connect via ssh (using a program like Putty) to SGBox specifying the user cli.If you haven’t changed them through the wizard, the default credentials are: user: clipass: CL1changePW Choose Appliance statistics […]
Triggering a Playbook from LCE module Any playbook can be launched as a reaction to a LCE rule, when the rule is triggered. Simply add the Run playbook action to the rule, then select a playbook or choose to create one from scratch. You will be redirect to the playbook configuration page. The playbook must […]