Monitoring AnalysisEngine via SNMP

[vaclav.cadek]

Hello everybody,

I would like to ask if it is possible to monitor the analysisengine in IDSM-2 by SNMP. Time to time the engine stops working:

idsm# iplog-status

Error: getIpLogList : ct-sensorApp.651 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.

I i would like to make the module send a SNMP if that happens.

I'm looking at his documet but I fail to see how to achieve above mentioned goal.

Thanks in advanco for any advice,

Best regards,

V.

[rhermes]

We've been plauged by this problem for years. We set up a custom sig that fires every 5 min and if our external monitoring system doesn;t see a signature fire in 10 min, we alert the Ops folks.

- Bob