...
So you want to integrate the devices discovered in Open-AudIT with NMIS for network monitoring. But you don't want every device, and you don't want to have to manually flag devices for monitoring - you know you want every Juniper switch in NMIS Open-AudIT being monitored by NMIS. How can we do that without the painful effort of flagging individual devices with nmis_manage = y (even using Bulk Edit)?
...
Well, I'm glad you asked, read on 
Selecting Devices
Integrations work by selecting a list of devices to be integrated. That list of devices is provided by a Query inside Open-AudIT. Our default query simply retrieves any devices with nmis_manage = y. But what if we create a new query to select any devices manufactured by Accedian? Well, go to menu → Queries → List Queries and select the query named "Integration Default for NMIS". You will see the SQL used. It is below.
...
Details of the below fields can be found on the page linked above. Obviously you will need to use your own host, password and user values. You'll need to use one of the query IDs from your newly created queries, above (replace 60 with it).
%hash = ( 'integration_rules_path' => 'conf/integration_rules.nmis',
'log_path' => 'log/nmisintegration.log',
'node_admin_path' => '/usr/local/nmis9/admin/node_admin.pl',
'node_file_path' => '/usr/local/nmis9/conf/Nodes.nmis',
'open_audit_details' => {
'host' => 'http://YOUR_SERVER',
'log_path' => 'log/openauditapi.log',
'password' => 'YOUR_OA_PASSWORD',
'user' => 'YOUR_OA_USER'
},
'open_audit_lookup_path' => 'conf/oa_nmis_lookup.nmis',
'open_audit_query_ids' => [60]
); |
Integration Rules
The default integration rules can be left as is, and are below. These should be placed in the file conf/integration_rules.nmis.
%hash = (
'nmis' => {
'create' => {
'active' => ['true'],
'authkey' => [],
'authpassword' => ['$DEVICE.credentials.snmp_v3.authentication_passphrase'],
'authprotocol' => ['$DEVICE.credentials.snmp_v3.authentication_protocol'],
'businessService' => ['$DEVICE.system.nmis_business_service'],
'collect' => ['$DEVICE.system.collect'],
'collect_snmp' => ['$DEVICE.system.collect_snmp'],
'collect_wmi' => ['$DEVICE.system.collect_wmi'],
'community' => ['$DEVICE.credentials.snmp.community'],
'customer' => ['$DEVICE.system.nmis_customer'],
'display_name' => ['$DEVICE.system.name'],
'group' => ['$DEVICE.system.nmis_group','Open-AudIT'],
'host' => ['$DEVICE.system.ip','$DEVICE.system.dns_fqdn'],
'location' => ['$DEVICE.locations.name'],
'model' => ['automatic'],
'name' => ['$DEVICE.system.name'],
'netType' => ['wan'],
'notes' => [],
'ping' => ['true'],
'port' => [161],
'privkey' => [],
'privpassword' => ['$DEVICE.credentials.snmp_v3.privacy_passphrase'],
'privprotocol' => ['$DEVICE.credentials.snmp_v3.privacy_protocol'],
'roleType' => ['$DEVICE.system.nmis_role','core'],
'threshold' => [],
'username' => ['$DEVICE.credentials.snmp_v3.security_name'],
'uuid' => ['$DEVICE.system.omk_uuid'],
'version' => ['$DEVICE.system.snmp_version'],
'wmipassword' => ['$DEVICE.credentials.windows.password'],
'wmiusername' => ['$DEVICE.credentials.windows.username']
},
'update' => {
'active' => ['true'],
'authpassword' => ['$DEVICE.credentials.snmp_v3.authentication_passphrase'],
'authprotocol' => ['$DEVICE.credentials.snmp_v3.authentication_protocol'],
'businessService' => ['$DEVICE.system.nmis_business_service'],
'collect' => ['$DEVICE.system.collect'],
'collect_snmp' => ['$DEVICE.system.collect_snmp'],
'collect_wmi' => ['$DEVICE.system.collect_wmi'],
'community' => ['$DEVICE.credentials.snmp.community'],
'customer' => ['$DEVICE.system.nmis_customer'],
'display_name' => ['$DEVICE.system.name'],
'group' => ['$DEVICE.system.nmis_group','Open-AudIT'],
'host' => ['$DEVICE.system.ip','$DEVICE.system.dns_fqdn'],
'location' => ['$DEVICE.locations.name'],
'model' => ['automatic'],
'name' => ['$DEVICE.system.name'],
'netType' => ['wan'],
'ping' => ['true'],
'port' => [161],
'privpassword' => ['$DEVICE.credentials.snmp_v3.privacy_passphrase'],
'privprotocol' => ['$DEVICE.credentials.snmp_v3.privacy_protocol'],
'roleType' => ['$DEVICE.system.nmis_role','core'],
'username' => ['$DEVICE.credentials.snmp_v3.security_name'],
'version' => ['$DEVICE.system.snmp_version'],
'wmipassword' => ['$DEVICE.credentials.windows.password'],
'wmiusername' => ['$DEVICE.credentials.windows.username']
}
}
); |
Usage
To run the integration, simply invoke the executable and pass it a configuration file as described in the previous section. You can also invoke the tool by itself, which will look for a configuration file at conf/nmisIntegration.nmis by default.
While most of the integration is driven by the options set in the configuration file, additional options can be passed at runtime. These options can be seen in the usage instructions for the integration script.
|
And that's it!
No, not really - one more step. You'll need to create a cron job for these to run on your poller(s) at the time of your choosing.
NOW you're done
But what if I don't have a copy of oa-nmis-integration.pl or oa-nmis-integration.exe?
...