SysLog / Reporting (ARS) Server

Syslog Server Integration

HySecure can be configured to send logs to an external Syslog Server on a port on which the server is running. The following key information needs to be configured for integrating an external Syslog Server:

1. Hostname / IP Address of the syslog server to which the logs need to be sent.

2. Port on which the Syslog Server is running.

3. The log level of the logs which need to be sent to the Syslog server.

For configuring the Syslog server, follow the steps given on the Integration page.

Important

For HySecure HA setup, the administrator needs to enable syslog on the Active node only.

Accops Reporting Server (ARS) Integration

There are various visualizations available for the HySecure Gateway in the Accops Reporting Server (ARS), which can be leveraged for monitoring the different parameters of the HySecure Gateway. Following are some of the existing dashboards available on ARS:

1. HySecure Dashboard

   This dashboard provides metrics on the HySecure gateway. This includes data about CPU Usage, Memory Usage, and other events of HySecure.

2. HySecure Historical Graphs

   This dashboard provides details on key matrices of HySecure but with an additional overlay of data having an offset of 24 hours. This allows the user to detect and realize usage patterns or analyze how the instances behave at any given point of the day by having a comparative view.

3. HySecure Geo Location Dashboard

   This dashboard extracts and visualizes data from HySecure's events by considering the geo-location tagged with the applicable event. The geo-location details are plotted on a world map or on a pie chart to provide an overview.

Additionally, there are pre-built data templates in ARS which can be used to create different visualizations.

Prerequisites & Limitations

1. Ensure that the "Log Zippers.zip" is available and unzipped to the installation path of the ARS server.

   Note

   The "Log Zippers.zip" file can be obtained from Accops Support

2. Currently, the steps needed to integrate Accops Reporting Server (ARS) with HySecure are through the backend and not through UI. As a result, root access to the HySecure Gateway is needed to achieve the same.

Install Log Shipping Agents on HySecure Gateway

There are primarily two log shipping agents viz. Filebeat and Metricbeat which are used to transport logs and matrices from HySecure to ARS. The integration involves the installation of these two shipping agents on the HySecure Gateway.

Filebeat Installation

Follow the steps to install the Filebeat agent:

1. On the ARS server which is to be integrated,

   1. Navigate to the Log Shippers\Filebeat\HySecure folder.

   2. Copy the "Primary" folder to the root of the HySecure gateway (/root). WinSCP can be used for the same.

2. On HySecure

   1. Login to the HySecure gateway with root access using Putty.

   2. Navigate to the above directory and execute the following commands so that the install script is executed

      chmod +x install.sh

      ./install.sh

   3. Enter the IP Address of the ARS server and press enter to finish the configuration.

Metricbeat Installation

1. On the ARS server which is to be integrated

   1. Navigate to the "Log Shippers\Metricbeat\HySecure" folder

   2. Copy the "Primary" folder to the root of the HySecure gateway (/root). WinSCP can be used for the same.

2. On HySecure

   1. Login to the HySecure gateway with root access using Putty.

   2. Navigate to the above directory and execute the following commands so that the install script is executed

      chmod +x install.sh

      ./install.sh

   3. Enter the IP Address of the ARS server and press enter to finish the configuration.

Important

Please repeat the above steps for the secondary HySecure server (if available) by utilizing the files in the respective HySecure Secondary folders.