DCE - Event Log SNMP Trap

[DCIM_Support]

Hi Community, Hi, emrekoca

My customer wants to have event logs in DCE which is who is log in or who change  threshold for information security. They are using SIEM Archsight software for controlling security logs, so they said they can give event logs only three way those are SNMP trap, Syslog or Database. Finally, please can you share me how can i send event logs with  my customer.

Kind Regards

Kerem

(CID:105465723)

[DCIM_Support · Accepted solution]

Hi Kerem,

This functionality does not yet exist within StruxureWare DCE. Product management is looking at such an audit trail for future releases but I have no definitive date to share, sorry. I've added this post to the enhancement request already in our system.

Steve

(CID:105465743)

[DCIM_Support]

Hi Kerem,

Concerning your question "...how can i send event logs with  my customer".

First, eventlog on different categories which interest you, can be looked and save in a html-format to the address http:///desktop/#eventlog .

Secondly, the same eventlog recorded on the DCE server in PostgreSQL table pg_eventlog_message, that can be much more interesting to your customer. This table can be downloaded simply from the DCE server: look, please, at this useful subject: How to download Capture logs on Data Center Expert

I am always glad to help.

(CID:105465769)

[DCIM_Support]

Hi Spezialist, Sorry for misundestanding.. SIEM just want real time audit event log which can be cef(Syslog) or SNMP trap not download. Regards Kerem

(CID:105465792)

[DCIM_Support]

Hi Kerem

Please assist.

I have downloaded the DCE event log and used winzip to extract the data, however i am not able to open it or get some sort of list of valuable data. There are various folders and txt files which im unable to understand.

Is there anyway to extract these log files into a exel spreadsheet\word doc to better understand these logs? Or is there a better way to extract logs ?

 Kind regards

(CID:126177444)

[DCIM_Support]

Dear juice,

I have downloaded the DCE event log and used winzip to extract the data, however i am not able to open it or get some sort of list of valuable data. There are various folders and txt files which im unable to understand.

You have downloaded and unpacked DCE-server system logs. I.e., these are Linux OS server log files and they have a lot of payload, especially for the purpose of diagnosing various problems. Therefore, if you are not familiar with Linux OS or are familiar at the level of a simple desktop user, then for you these files will be incomprehensible and useless. Therefore, it is recommended to send these log files to Schneider Electric employees, if you have any problems with your DCE-server.

Is there anyway to extract these log files into a exel spreadsheet\word doc to better understand these logs? Or is there a better way to extract logs ?

No, this is impossible because of the reason I wrote above.

If, however, you want to understand the structure and purpose of DCE-server system logs a little, I recommend to take a look at my answers in topic  about this. But again, without a thorough knowledge of Linux OS, you will not just be able to figure it out.

In any case, I will be happy to answer your questions 😀.

With respect.

(CID:126177453)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.