EMC Isilon
Version: OneFS 7.1 and later.
Isilon OneFS is the NAS solutions which combines the three layers of traditional storage architectures — file system, volume manager, and data protection — into one unified layer.
Netsurion Open XDR helps you to monitor user login activities, file operation (open, close, read, write, etc) activities and changes in file permission. It will trigger an alert whenever changes occurs in file permission or login failure by users. It’s knowledge object will help you make log search easier and informative.
Netsurion Data Source Integration for EMC Isilon allows you to monitor the following components:-
- Operations – User login/logoff activities, file operation like open, close, read, write,etc.
- Security – User login failure and file permission changes
Once EMC Isilon is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | EMC Isilon – Login failed | This alert generated when user logon failed happens on EMC Isilon. |
| Security | EMC Isilon – File permission changes | This alert generated when user made changes in File or directory permission. |
| Operations | EMC Isilon – File or directory deleted | This alert generated when user deleted file or directory from the EMC Isilon zones. |
Reports
| Type | Name | Description |
|---|---|---|
| Security | EMC Isilon – File permission checked and changed | This reports provides information about the checking and changing in file permission. This report will show user information (Security ID, Client IP) who made changes in file (file path, file type) permission. |
| Security | EMC Isilon – Logon failed | This reports provides information about the user logon failed by a client. This report gives will show client IP address from where user trying to login into EMC Isilon. |
| Operations | EMC Isilon – File operations | This report provides information about the operation (like open, close, read, write, rename, etc) happens on file in EMC Isilon zone by a user. This report will show user information (like Security ID, Client IP) who did operations (Open, close, read, write, rename, etc) on File (like filepath, file type). |
| Operations | EMC Isilon – Logon and logoff activities | This reports provides information about the logon and logoff activities happen on EMC Isilon. This report will show user information who logon or logoff from EMC Isilon. |
Documentation:
The configuration details are consistent with Netsurion Open XDR 8.x and later, OneFS 7.1 and later.
Download Integration Guide for configuration instructions and more information.