Hi,
I need to schedule sending a file from SA Server (CentOS 6.0) via email as an attachment. Anyone has any idea how this can be done? I know cron is used for scheduling on the server but how can we schedule sending a mail with attachment?
The file I need to send is the report for devices not reporting to SA in last 24 hours. If anyone could tell how can this be implemented, it would be great as the method I have used doesn't generate a proper file !
It is not a bad way to be honest, but I need to schedule a report so that it can be reviewed on a daily basis.
Moreover, in the option you suggested, I need to manually add each and every device (in my environment it is 400+) and I couldn't find any option as well to import a list instead !
Hi,
In Monitoring configuration to monitor all devices just put a * in source type and source host - you will get an email for each device not sending data that reaches threshold. There's a drawback - you will get those emails every minute for every device and there's no option to suppress those emails.
I'm struggling with a similar report myself.
You could do something with NwConsole and invoking logStats. You could subsequently pipe this output to a text file for example and then utilise "sendmail" from the system itself:
NwConsole -c login localhost:50002 <user> <password> -c decoder logStats > logStats.txt
yes, I have used the same thing and have successfully generated the report. The problem I am facing is in mailing the report to my corporate email ID. Can you somehow help me with the command for that? It would be of great help because I need to schedule this mail in the end for daily basis !
Thanks for the suggestion n1k ! But i suppose this won't work out for me ! Can't handle so many emails
on Aug 1, 2014
Hi Rahul,
Why not utillise event source monitoring within the GUI? You can set up SA to email you after any event source has stopped logging for x period of time:
Monitoring Configuration Panel - RSA Security Analytics Documentation