Installing SNMP on the SOAR Platform
Use the net-snmp package to install the SNMP agent.
Before you start, make sure that the optional packages are downloaded as described in Installing optional packages for the SOAR Platform.
Complete the following steps to install SNMP.
- If not already done, install the
net-snmppackage:sudo yum --noplugins install -y net-snmp - Create the
/var/lib/net-snmp/snmpd.confSNMP configuration file with the following contents.createUser res-snmp MD5 sample_password DESContinue to use
res-snmpas the username, but replacesample_passwordwith your chosen password. Make sure to note the username and password since the user details are obfuscated after the SNMP service is started. You must use the exact same username and password when you create the SNMP user on the monitoring server. - Create the
/usr/share/snmp/snmpd.local.conffile with the following contents:rouser res-snmp disk / disk /var/log disk /usr/share/co3If you want to generate alerts based on minimum space, you must add the percentage of minimum disk space. For example, if you want an alert if the disk space on these folders falls less than 10%, enter the following command:rouser res-snmp disk / 10% disk /var/log 10% disk /usr/share/co3 10% - Enable SNMP so that it automatically starts when the SOAR Platform
starts.
sudo systemctl enable snmpd - Start SNMP, as follows:
sudo systemctl start snmpd - Open SNMP port 161 for external monitoring.
- Create the
/etc/firewalld/services/snmpd.xmlfile with the following contents. It adds a firewall service for SNMP.<?xml version="1.0" encoding="utf-8"?> <service> <short>SNMPD</short> <description>SNMP daemon</description> <port protocol="udp" port="161"/> </service> - Add the new service to the firewall as
follows:
sudo firewall-cmd --zone=public --add-service snmpd --permanent - Reload the firewall, as follows:
sudo firewall-cmd --reload
- Create the