ESI New Event Sources
I want to integrate a new devices to the RSA envision, how could i get a list of all events from this device in order to parse them, it is not practical to wait for the event to be loged in order to parse it.
In my case as an example i want to integrate Dell MD3000i SAN using SNMP protocol.
The best method is to log the events to envision first and then using the lsdata command you can create a log file.You can use this log file to create a parser using ESI tool.
You can get this information from the vendor (DELL ) only incase you dont have snmp proconfigured for monitoring purpose.
I would suggest start with the events that are being generated .Additionally you can integrate the device and wait for lets say a period of 2-3 weeks and then start working on the parser.