Collect data from Infoblox

See the changelog of the Syslog Listener here.

Overview

The following article outlines a basic data flow from your activity and events generated by Infoblox to Onum using the Syslog Listener.

Prerequisites

If you're using TLS authentication, contact Onum to get the cert information needed for TLS communication.

Infoblox Setup

Setting up Infoblox to send log data via Syslog is done through the Grid Manager and the configuration is typically applied at the Grid Properties level to affect all members.

This is a critical step for integrating Infoblox DDI data (DNS queries, DHCP leases, audit logs) into Onum.

Simply enter the required Onum sending address in your Infoblox configuration.

Onum Setup

1

Log in to your Onum tenant and click Listeners > New listener.

2

Double-click the Syslog Listener.

3

Enter a Name for the new Listener. Optionally, add a Description and some Tags to identify the Listener.

4

Enter the required

• Port

• Protocol (TCP or UDP). (Default is 514 for UDP/TCP, 6514 for Secure TCP).

5

Choose the required Framing Method, which refers to how characters are handled in log messages sent via the Syslog protocol. Choose between:

• Auto-Detect - automatically detect the framing method using the information provided.

• Non-Transparent Framing (newline) - the newline characters (\n) within a log message are preserved as part of the message content and are not treated as delimiters or boundaries between separate messages.

• Non-Transparent Framing (zero) - refers to the way zero-byte characters are handled. Any null byte (\0) characters that appear within the message body are preserved as part of the message and are not treated as delimiters or boundaries between separate messages.

• Octet Counting (message length) - the Syslog message is preceded by a count of the length of the message in octets (bytes).

6

If you're using TLS authentication, enter the data you received from the Onum team in the TLS configuration section (Certificate, Private key and CA chain). Choose your Client authentication method and Minimum TLS version.

7

Finally, click Create labels. Optionally, you can set labels to be used for internal Onum routing of data. By default, data will be set as Unlabeled. Click Create listener when you're done.

Learn more about labels in this article.