Configuration – SGBox Next Generation SIEM & SOAR https://www.sgbox.eu Next Generation SIEM & SOAR Mon, 02 Dec 2024 15:53:30 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 https://www.sgbox.eu/wp-content/uploads/2020/09/cropped-Logo-SGBox-Trasparente-NO-SCRITTA-150x150.webp Configuration – SGBox Next Generation SIEM & SOAR https://www.sgbox.eu 32 32 Create custom ping script https://www.sgbox.eu/en/knowledge-base/create-custom-ping-script/ Thu, 30 Jun 2022 09:07:19 +0000 http://10.253.1.91/?post_type=epkb_post_type_1&p=7576 The custom ping script

Sometimes is needed modify the default value of a script. For example the ping. Below is explained how to do that with fixed or variable values.

Requirements:

  • the host must be present in the section SCM > Network > Host.

Connect at the SGBox web interface on  SM > Configuration > Script
Create custom ping script

Click on New Script Test to create a new script.
Once the configuration window is opened, select the host on which you want to make the test and the frequency.
All the Retry parameter are explained in the first article: Create a new test script
Create custom ping script

Select Ping Report as test the probe that will execute the script.
As you can see the default Warning value is 10ms. Click on Modify in order to modify it.
Create custom ping script

There are two ways to modify the script:
1. Directly changing the reported value. In our example from 10 to 100 and click on ADD. Remember to put the Default flag and give a new name if you want to reuse it.

Create custom ping script

2. Using variables. You can set the variable WARNING and put your value in the right box. In this way you are able to change it without recreate the script. Remember to put the Default flag and give a new name if you want to reuse it.

Create custom ping script

Click on Save to apply your settings.

]]>
Create a new test script https://www.sgbox.eu/en/knowledge-base/create-a-new-test-script/ Fri, 28 Jun 2019 12:44:21 +0000 https://10.253.1.90/sgbox/EN/?post_type=epkb_post_type_1&p=1654 The test scripts

These scripts are used to perform check and evaluate the health of your network. Below is explained how to configure a simple script that makes a ping to check if the machine is up or down.

Requirements:

  • the host must be present in the section SCM > Network > Host.

Connect at the SGBox web interface.
SGBox > SM > Configuration
Create a new test script

Select Script.
Create a new test script

Click on New Script Test to create a new script.
Create a new test script
Once you open the configuration window, select the host on which you want to make the test.
Create a new test script

On section Email Alert select the user who should be notified when a problem occur.
In Frequency section, specify every how many minutes the check will be perform.
Below are some values to be set when the check fails:
For N times: set the number of times you want to retry the check before changes state.
Every N Seconds: specify every how many seconds the re-check will be perform.
Alert after N Failures: After these number of failures the state will be changed ( from OK to CRITICAL for example ).
Click on Next to go to the next step.
Create a new test script

Select a Default Script from the list. In our case we will select Ping Report.
Select a Probe, that is the machine that will perform the check. If SGBox will run the test (as in our case): select SGBox. If you are in a distributed environment or MultiTenant environment and the collector will run the test: select the collector instead SGBox.
Click on Add button.
Create a new test script

Click on Save button to finish.
Create a new test script

We have configured the test script.
Create a new test script

]]>