Pure Storage
Version: Pure Storage FlashArray FA-400 Series, Purity v4.8 and later.
Pure Storage provides an all-flash enterprise array storage for vendors. They provide the logs which allow administrators to troubleshoot issues and oversee their infrastructure operations from a single, simple-to-use application quickly and easily. Using the Flash Array syslog server, these logs can be forwarded for future analysis.
Pure Storage can be integrated with Netsurion Open XDR via syslog. Pure Storage logs events information like volume activities, user activities, cluster activities and audit events. Netsurion generates detailed reports for additional volumes that are attached, created or deleted. Its graphical representation shows user login success and volume creation by device names.
Netsurion Open XDR triggers alerts in the event when a volume has been removed, flash array replication is delayed, etc.
- Security – User login failed events.
- Operations – Additional volume activities.
- Compliance – Login and logoff activity events.
Once Pure Storage is configured to deliver events to Netsurion Open XDR, then alerts, dashboards, and reports can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | Pure Storage – User login failed | This alert is generated when the user tries to login and it fails. |
| Operations | Pure Storage – Volume has been deleted or disconnected or removed | This alert is generated when additional volume has been removed or deleted or disconnected. |
Reports
| Type | Name | Description |
|---|---|---|
| Security | Pure Storage – User login failed | This report provides information related to user logon failure event i.e., when a user tries to login and it fails. It will contain the fields information like username, IP address, login console type, etc. |
| Operations | Pure Storage – Additional volume activities | This category provides information related to additional volumes created, deleted, added, and removed. |
| Compliance | Pure Storage – User logon success | This category provides events information related to a user try to log into Pure Storage and is successful. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.2 and later, and Pure Storage.
Download Integration Guide and How-to Guide for configuration instructions and more information.