Symantec Endpoint Integration

[mrjsokol]

Before I started going down the rabbit hole of possible solutions, has anyone integrated with SEP 14 with nagios on a windows client yet? I dont see any out of the box solutions or any external support from Symantec to push status via exe or log on client other than reading application/logs which isnt that great.

Any input would be appreciated.

[cdienger]

Not sure if these would cover everything you're looking for but there are a few plugins available on the exchange:

https://exchange.nagios.org/index.php?o ... d=symantec

[ssax]

It looks like you can send syslog (I don't see any other options for SEP) but that would be more inline with our Nagios Log Server product which is meant to ingest and monitor/alert on syslog/logs and provide the flexibility to do the things you need with syslogs:

https://www.nagios.com/products/nagios-log-server/

https://techdocs.broadcom.com/content/b ... e1107.html

There isn't a built-in way to process syslogs and convert them into check results in XI. You could use check_logfiles or NSClient++ log monitoring (as you've found) but I don't see any other way to export/access that information.

https://labs.consol.de/nagios/check_logfiles/index.html

Here is the Windows binary for check_logfiles, see attached.

check_logfiles.zip