Blog Entries

23. 02. 2024 Juergen Vigna Log-SIEM, NetEye, Unified Monitoring

Monitoring Logs in Elasticsearch: A Practical Example

Say you want to monitor logs coming into your Elasticsearch instance, and have it send data to your Monitoring Dashboard. I’ll show you how to do this with a practical example, in particular for an event coming from the Active Directory where a user is locked out, and the associated Domain Controller sends the event…

Read More
22. 12. 2023 Juergen Vigna Log-SIEM, NetEye, Unified Monitoring

SIEM: Monitor Hosts Sending Data to Elasticsearch

Do you have a SIEM installation based on Elasticsearch (like the NetEye 4 SIEM Module) and are you sending data to it from your hosts? Then you’ll surely want to know whether your host is actually sending data, or if nothing is coming out at all. For this I made available a simple icinga/nagios plugin…

Read More
30. 11. 2023 Juergen Vigna Log Management, Log-SIEM, NetEye, Unified Monitoring

Monitor Your Elasticsearch Agents Registered in the Elastic Fleet Server

Say you’re using the SIEM Module in NetEye and are deploying the Elasticsearch Agent to your clients. You’d surely like to know if those agents are still sending data and are still connected to the Elastic Fleet server. I had this problem recently and came up with a new monitoring plugin that uses the Kibana-API…

Read More
25. 09. 2023 Juergen Vigna Icinga Web 2, NetEye, Unified Monitoring

Monitoring Downtime Automation from Windows

Do you ever need to reboot or do maintenance on your Windows Server? Then if the server is monitored by NetEye, you’ll surely want to mark it in downtime so as not to have notifications sent out for problems arising due to maintenance, and/or to be able to have the correct SLA marked for your…

Read More
28. 04. 2023 Juergen Vigna Icinga Web 2, NetEye, Unified Monitoring

Elasticsearch Snapshots and How to Monitor Them

If you have a NetEye with SIEM Module activated or own an Elasticsearch installation then you have surely activated the Elasticsearch Snapshots to make backups of all your indexes (or at least the important ones). However you have to take a regular look at your Snapshots Reports to check that everything is working correctly. I…

Read More
15. 12. 2022 Juergen Vigna NetEye

Migrate a NetEye 4 Server from CentOS 7 to RHEL 8 (v4.22->v4.23) with EFI Boot

When upgrading NetEye 4 from version 4.22 to version 4.23, the main focus is the upgrade/change of the operating system from CentOS 7 to the new RHEL 8 operating system. Normally you can proceed as explained in the Upgrade section of the user guide since NetEye 4 uses the “normal” BIOS boot sector with grub….

Read More
12. 12. 2022 Juergen Vigna NetEye, Unified Monitoring

Using More Than One SMS Gateway on a Server and Handling SMS Queues

Sending an SMS requires time, between 5-7 seconds. This means that if you have to write a lot of SMS’s, you have to attach more than one SMS gateway to your server to be able to send them within a certain time frame. This is possible using the USB connection of the SMS gateway. As…

Read More
21. 11. 2022 Juergen Vigna NetEye, Unified Monitoring

Monitor Your SMS Gateways by Sending Actual SMS’s (Part 2/2)

Last time I wrote about how you can have incoming SMS messages sent to the Tornado Engine so that you can make Tornado Rules to process them. This time I’d like to show you a real use case where we check whether the SMS Gateway is really working or not by sending an SMS to…

Read More
28. 10. 2022 Juergen Vigna Contribution, NetEye

Receiving and Handling Incoming SMS’s on NetEye in Tornado (Part 1/2)

Most physical NetEye servers have an SMS Gateway attached in order to send CRITICAL notifications via an SMS message, since this will work even when the main network is down. However, sometimes you just want to send messages to your NetEye server’s SMS Gateway in order to effect certain actions, for example just to check…

Read More
22. 03. 2022 Juergen Vigna ITOA, NetEye, Unified Monitoring

Monitoring Fortigate Firewall SLA Trackers

Recently a customer told me he would like to monitor and graph the values that his Fortigate Firewall was generating for his configured SLA Trackers. What are these SLA Trackers? I informed myself and found the following in a Fortigate Cookbook. Fortigate Performance SLA ─ Link Monitoring Performance SLA link monitoring measures the health of…

Read More
22. 12. 2021 Juergen Vigna Cloud, NetEye

Monitoring HPE Nimble Storage

HPE Nimble Storage is a data storage solution, created by Nimble Storage, which was bought by HPE in 2017. Recently I had to monitor such a storage service and for this I used the following plugin: check_nimble_health_api.py Nimble offers a REST Web API to query its status and that’s what this plugin uses. Unfortunately it’s…

Read More
23. 11. 2021 Juergen Vigna APM, NetEye, Visual Synthetic Monitoring

HOW-TO’s for Alyvix Server Integration into NetEye 4

We’ve already written a blog post about how to integrate Alyvix 3 and Alyvix Server into NetEye 4. Some time has passed and a few things have changed, so here are some new HOWTO’s that can make your life easier. HARD State/Soft State with the right notification sent out The first thing is that the…

Read More
22. 11. 2021 Juergen Vigna Contribution, NetEye, Unified Monitoring

Monitoring SOAP Webservices

SOAP is a messaging protocol for exchanging information based on XML over the network. SOAP messages are written in XML, which is why they are platform- and language-independent. A lot of enterprises have such webservices that return useful data for use in (web) applications. Now, if you want your application to work, then these webservices…

Read More
28. 05. 2021 Juergen Vigna Contribution, ITOA, NetEye

Monitoring Host Availability inside Grafana

A frequent request I get is how to view the availability of hosts and/or services within a Grafana dashboard. Here I demonstrate how to do this for host availability. To implement this, we first create a new table in our MariaDB on NetEye. I’ll call this table host_daily_sla and put it in the pre-existing reporting…

Read More
08. 02. 2021 Juergen Vigna ITOA, NetEye

GlusterFS as a Shared Elasticsearch Backup Volume

To be able to make Elasticsearch Snapshots you need shared storage mounted on all Elasticsearch Data Nodes. There are various possible file systems you can use for this: GFS, NFS, CIFS and GlusterFS. What is GlusterFS GlusterFS is a scalable network file system suitable for data-intensive tasks such as cloud storage and media streaming. GlusterFS…

Read More

Archive