Page 1 of 1
Symantec Endpoint Integration
Posted: Thu May 28, 2020 8:13 am
by mrjsokol
Before I started going down the rabbit hole of possible solutions, has anyone integrated with SEP 14 with nagios on a windows client yet? I dont see any out of the box solutions or any external support from Symantec to push status via exe or log on client other than reading application/logs which isnt that great.
Any input would be appreciated.
Re: Symantec Endpoint Integration
Posted: Thu May 28, 2020 2:26 pm
by cdienger
Not sure if these would cover everything you're looking for but there are a few plugins available on the exchange:
https://exchange.nagios.org/index.php?o ... d=symantec
Re: Symantec Endpoint Integration
Posted: Thu May 28, 2020 2:28 pm
by ssax
It looks like you can send syslog (I don't see any other options for SEP) but that would be more inline with our Nagios Log Server product which is meant to ingest and monitor/alert on syslog/logs and provide the flexibility to do the things you need with syslogs:
https://www.nagios.com/products/nagios-log-server/
https://techdocs.broadcom.com/content/b ... e1107.html
There isn't a built-in way to process syslogs and convert them into check results in XI. You could use check_logfiles or NSClient++ log monitoring (as you've found) but I don't see any other way to export/access that information.
https://labs.consol.de/nagios/check_logfiles/index.html
Here is the Windows binary for check_logfiles, see attached.
check_logfiles.zip