Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Silver

CS-MARS 4.3 any support for VMWARE and NetApp servers

I've been asked to look at adding vmware and netapp servers into MARS 4.3.

I've never worked on either OS, apart from vmware on windows. What issues if any should I be aware of?

Am I limited to receiving syslog data only, assuming these OS's will generate such data.

2 REPLIES
Cisco Employee

Re: CS-MARS 4.3 any support for VMWARE and NetApp servers

You are limited to syslog data only unless it's a Window's platform. There you can use the snare agent to send information that is kept in one of the Windows Event Logs supported by snare.

Beware that you will need to configure custom parsing as those are not natively supported systems. If running on Windows or generic Linux, use MARS 6.0.1 or newer as the new DSF (Device Support Framework) functions now allow for extending native parsers with custom parser entries.

Silver

Re: CS-MARS 4.3 any support for VMWARE and NetApp servers

Thanks, as I've not worked on MARS for a while I wasnt sure if there was any other way of supporting these OS's. I'm just going through the upgrade to 6.2 process, so may look at using the DSF functions.

312
Views
5
Helpful
2
Replies