Security

OpenVMS Logs

dale_lakes
New Member

How are OpenVMS admins gettig logs into Splunk?

Thanks in Advance.

Tags (1)
0 Karma

danan5
Path Finder

I didn't know anyone else has faced this issue.

The approach I have seen is drawn from:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c04623140

It seems the OpenVMS system send a report via email (the conduit off the box) and then dropped somewhere splunk can pick it up from.

From the OpenVMS manual (section 9.5.1)
"The most common type of report to generate is a brief, daily listing of events. You can create a command procedure that runs in a batch job every evening before midnight to generate a report of the day’s security event messages. "

0 Karma

joesrepsolc
Communicator

We have a linux admin that wrote some scripting that produces some .txt files on a host from OpenVMS. Then the splunk forwarder on that host monitors the directory where the .txt files land.

Pretty simple solution.

0 Karma

chris
Motivator

Where I used to work we had syslog-ng listen for data that came from devices where the splunk forwarder could not be installed, we then replaced syslog-ng with splunk forwarders. We had OpenVMS Servers sending data to those machines aswell. (I'm not familiar with OpenVMS, I was the splunk admin).

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...