Monitoring IBM Power Systems iSeries

[Eric Martinez]

Hello,

I was asked the need to monitor an IBM Power Systems iseries (OS IBM 7.1); I understand that there is no agent for this type of operating system, so it occurred to me that the Wazuh server serves as a syslog server. Now my question is if any of you have had any experience with equipment of this magnitude? Is it possible to export the logs in real time? How to measure the number of events handled by a team of this size?

Sure to have your help, I remain pending

[Awwal Ishiaku]

Hello Martinez,

To accomplish this, you need to be sure that your device can forward logs. You will need a syslog server with Wazuh agent installed.
The following generic steps should guide you on how to send the logs to Wazuh:

1. Set up a syslog server. Preferably a linux based syslog server with Wazuh agent installed on it.
2. Use Rsyslog to receive the logs and save the logs to a file. 
3. Configure the Wazuh agent to forward those logs to the Wazuh server. Read more about how to do steps 2 and 3 here.
4. Configure your IBM device to send syslog to your syslog server.

I believe Wazuh should start receiving and processing these logs if the following steps are adhered to.

Let me know how it goes.
Thanks.

[Riccardo Olivetto]

Hi, does it works?