Size: a a a

MaxPatrol SIEM & VM

2021 May 01

MH

Mohammed Houssani in MaxPatrol SIEM & VM
Pt*
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Ok. It's siem queue on core rmq
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
Yes
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Check Core health monitoring status.
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
If it's not green, read message displayed
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Has siem reciever  service running state?
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Check queues in siem rmq. Some of them may be filled
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
Am not sure how to check siem reciver  service status
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
Is this on debian?
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Yes
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Check rmq on siem queues http://<siem_ip>:15672
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
mpx_siem / P@ssword ( by default)
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Hm....
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
So what do you see here?
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
The above is the design rmq
источник

MH

Mohammed Houssani in MaxPatrol SIEM & VM
Zero queued
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Run on Debian: systemctl list-units --type=service
источник

EM

Eugene Matveev in MaxPatrol SIEM & VM
Check status of siem reciever
источник