Logsign - External SNMP Settings

In order to add Logsign to the monitoring product, we need to do the following steps.

1- First of all , connect to the server via cli and install snmp and snmpd services.

# sudo apt-get install snmp

# sudo apt-get install snmpd

 

2- The snmpd.conf file under cd /etc/snmp/ is backed up and the conf file is changed as follows.

smuxsocket 127.0.0.1

rocommunity "community value is written"

com2sec local localhost "community value is written" group MyRWGroup v1 local

group MyRWGroup v2c local

group MyRWGroup usm local

view all included .1 80

access MyRWGroup "" any noauth exact all all none

com2sec notConfigUser default mrtg

group notConfigGroup v1 notConfigUser

group notConfigGroup v2c notConfigUser

view systemview included .1.3.6.1.2.1.1

view systemview included .1.3.6.1.2.1.25.1.1

view systemview included .1 80 access notConfigGroup "" any noauth exact systemview none none syslocation "product name"

syscontact Ubuntu.gr info@ubuntu.gr

 

3- The information in the nano/etc/default/snmpd file is backed up and changed as follows.

This file controls the activity of snmpd and snmptrapd

MIB directories. /usr/share/snmp/mibs is the default, but

including it here avoids some strange problems.

export MIBDIRS=/usr/share/snmp/mibs

snmpd control (yes means start daemon).

SNMPDRUN=yes

snmpd options (use syslog, close stdin/out/err).

SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid ' # snmptrapd control (yes means start daemon). As of net-snmp version

5.0, master agentx support must be enabled in snmpd before snmptrapd # can be run. See snmpd.conf(5) for how to do this.

TRAPDRUN=no

snmptrapd options (use syslog).

TRAPDOPTS='-Lsd -p /var/run/snmptrapd.pid'

create symlink on Debian legacy location to official RFC path SNMPDCOMPAT=yes

 

4- Restart snmpd service and add Logsign to monitoring device as integration.

# service snmpd restart

 

Was this article helpful?
0 out of 0 found this helpful

Articles in this section

Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.