Symantec IGA virtual appliance: monitoring vApp services using SNMP
Article ID: 279379
Updated On:
Products
Issue/Introduction
How can we monitor the vApp services using SNMP protocol, similar to monitoring with "s" command in vApp command line ?
Environment
Symantec Identity Governance and Administration (IGA) 14.4, 14.5
Resolution
Please use this document to properly configure SNMP as the first step:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-4/virtual-appliance/monitoring-virtual-appliance.html
It is possible to utilize "s" command in SNMP protocol using "extend" setting.
Add the following line into /etc/snmp/snmpd.conf file on vApp machine:
extend s_command /opt/CA/VirtualAppliance/scripts/cavapp_monitor
Then restart the snmpd service:
service snmpd restart
After that it is possible to poll "s" command results by using some SNMP manager.
In this example we use snmpwalk command to get "s" command results from a remote vApp node.
Please note that it may be required to use -t option with snmpwalk command to set proper timeout value, as "s" command make take a while to complete.
ANSI escape sequences used in "s" command to change display colors, like .[0;32m in example below, and other extra printouts may then be filtered out to have more readable output.
snmpwalk -u <snmpv3user> -A <password> -a SHA -X <password> -x AES -l authPriv vAppIPaddress -v3 -c public nsExtendOutput1
# snmpwalk -u <user> -A <password> -a SHA -X <passwoprd> -x AES -l authPriv <IP> -v3 -c public nsExtendOutput1
NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."s_command" = STRING: .[1;37m.[4mSymantec IGA Virtual Appliance version 14.4.2 - SANDBOX mode.[0m
NET-SNMP-EXTEND-MIB::nsExtendOutputFull."s_command" = STRING: .[1;37m.[4mSymantec IGA Virtual Appliance version 14.4.2 - SANDBOX mode.[0m
.[1;33m.[4mFIPS enabled:.[0m false.[0m
.[1;33m.[4mDR Standby:.[0m false.[0m
.[1;33m.[4mServer IP addresses:.[0m xxx.xxx.xxx.xxx .[0m
.[1;34m.[4mEnabled services:.[0m
Oracle Database Express 11g xxx.xxx.xxx.xxx .[0;32m[OK] Oracle Express Edition started.[0m
Connector Server xxx.xxx.xxx.xxx .[0;32m[OK] Connector Server started.[0m
Provisioning Server xxx.xxx.xxx.xxx .[0;32m[OK] Provisioning Server started.[0m
.[0;32m[OK] co file usage: 1MB/250MB (0%).[0m
.[0;32m[OK] inc file usage: 1MB/250MB (0%).[0m
.[0;32m[OK] main file usage: 9MB/250MB (3%).[0m
.[0;32m[OK] notify file usage: 1MB/250MB (0%).[0m
.[0;32m[OK] All DSAs are started.[0m
Identity Manager xxx.xxx.xxx.xxx .[0;31m[ERROR] Identity Manager is stopped.[0m
.[0;32m[OK] vapp144-idm-userstore-router-caim-srv-01 started.[0m
Identity Portal xxx.xxx.xxx.xxx .[0;32m[OK] Identity Portal started, port 8081.[0m
.[0;32m[OK] Identity Portal Admin UI is available.[0m
.[0;32m[OK] Identity Portal User Console is available.[0m
.[0;32m[OK] Java heap size used by Identity Portal: 808MB/1512MB (53%).[0m
Identity Governance xxx.xxx.xxx.xxx .[0;32m[OK] Identity Governance started, port 8082.[0m
.[0;32m[OK] Identity Governance is running.[0m
.[0;32m[OK] Java heap size used by Identity Governance: 1007MB/1512MB (66%).[0m
User Store xxx.xxx.xxx.xxx .[0;32m[OK] STATS: number of objects in cache: 6.[0m
.[0;32m[OK] file usage: 1MB/200MB (0%).[0m
.[0;32m[OK] vapp144-UserStore_userstore-01 started.[0m
.[1;37m=== LAST UPDATED: Fri Feb 9 12:04:08 AEDT 2024 ====.[0m
NET-SNMP-EXTEND-MIB::nsExtendOutNumLines."s_command" = INTEGER: 26
NET-SNMP-EXTEND-MIB::nsExtendResult."s_command" = INTEGER: 0
#
Feedback
