introduction pulpo network monitoring system pulpo system
TRANSCRIPT
Introduction Pulpo Network Monitoring System
Pulpo System
Klik salah satu menu berikut
Availability
Performance
Inventory
Event/Log Management
SNMP
WMI
Telnet
SSH
Syslog
EventLog
Function Protocol Support- PULPO MONITORING- PULPO MONITORING
- PULPO HELPDESK- PULPO HELPDESK
Network
Servers &Storage
Applications
Managers
Entire IT Infrastructure
Service Desk :Pulpo Helpdesk
Provision/Patch
Configure/Control BSM Workflow Security
Integrated IT Infrastructure Management
SNMPWMIJMXSyslogSSHWin RPCPerfmonTelnetICMPHTTPSMTPPOPSQLRESTCustom
IT Team
Application
Services
Platform
Network
Environment
"Agentless"
Inventory &Configuration
AvailabilityManagement
PerformanceManagement
CMDB
Reports & Alerts
Collect & Control
Integration
EventManagement
Collect & Control
MONITORING
Access ControlUser Interface SIEM (AllienVault/OSSIM, AccelOps)
Klik menu user interface
Access ControlUser InterfaceUser Interface SIEM (AllienVault/OSSIM, AccelOps)
EventLogEventLogEventLogEventLog
SyslogSyslog
Log CollectorLog Collector
DBDB
Encode(Rule)Encode(Rule)Encode(Rule)Encode(Rule)
AnalyzeAnalyze
AlertAlert
SIEM EngineSIEM Engine33rdrd Party Party
Raw LogRaw Log
Log CollectorLog Collector
ElasticElasticSearchSearch
ExternalAnalysisExternalAnalysis
Yes
PulpoEvent Management
NO
Correlation,Transformation
Incoming eventIncoming event
One failed ssh login VIP hostOne failed ssh login VIP host
3 failed logins in the next 60 seconds3 failed logins in the next 60 seconds
3 more failed logins in the next 5 minutes3 more failed logins in the next 5 minutes
Correlation rule will generate an alertCorrelation rule will generate an alert
Alert reinsertedInto event queue
Incoming eventIncoming event
Succesful SSH login to VIP hostSuccesful SSH login to VIP host
Service going down on hostService going down on host
Correlation rule will generation an alertCorrelation rule will generation an alert
Alert reinsertedInto event queue
Pulpo System
Correlation/Integration: Availability, Performance,Log/Event
For Root Cause Analysis
Pulpo System
Affordable & Simplified
Functional & Scalable
Easy, Suitable for Customer Needs
Too Much/Rigid/Compicated
Too Little
Too Hard
Unique ProductPowerful
Easy to UseIntegratedModern
Architecture(Web 2.0)
+Unique OperatingModel(Agentless)
Customer Specifics Needs
Pulpo System
Pulpo System
<< Klik menu
Pulpo System
Pulpo System
Pulpo System
Pulpo System
Pulpo System
Pulpo System
Layer 3
Pulpo System
Layer 3
Pulpo System
Layer 2
Pulpo System
Layer 2
Pulpo System
• LDAP
• Radius
• Active Directory
Pulpo System
Scalability (Multi Collector) Initiate from One Server to Many Servers High Availability (Cluster) Two/More Redundant(Active/Passive)
Server
Pulpo System
Pulpo System
• All Linux Distro Intel/AMD Xeon
RAM 8 GB
HDD 200 GB
OS H/W
Browser
• Firefox
• Google Chrome
Client
• Windows
• Linux
• Android
Pulpo System
Pulpo System