Security

OpenVMS Logs

dale_lakes
New Member

How are OpenVMS admins gettig logs into Splunk?

Thanks in Advance.

Tags (1)
0 Karma

danan5
Path Finder

I didn't know anyone else has faced this issue.

The approach I have seen is drawn from:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c04623140

It seems the OpenVMS system send a report via email (the conduit off the box) and then dropped somewhere splunk can pick it up from.

From the OpenVMS manual (section 9.5.1)
"The most common type of report to generate is a brief, daily listing of events. You can create a command procedure that runs in a batch job every evening before midnight to generate a report of the day’s security event messages. "

0 Karma

joesrepsolc
Communicator

We have a linux admin that wrote some scripting that produces some .txt files on a host from OpenVMS. Then the splunk forwarder on that host monitors the directory where the .txt files land.

Pretty simple solution.

0 Karma

chris
Motivator

Where I used to work we had syslog-ng listen for data that came from devices where the splunk forwarder could not be installed, we then replaced syslog-ng with splunk forwarders. We had OpenVMS Servers sending data to those machines aswell. (I'm not familiar with OpenVMS, I was the splunk admin).

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...