5.02021-11-21T21:26:22ZSECURITEBALABIT-SNMPv2-Shell_Control_BoxBALABIT-SNMPv2-Shell_Control_Box## Overview
Template for supervise, with SNMP v2, the product: **BALABIT Shell Control Box**
<https://www.balabit.com/fr/network-security/scb>
---
You must add values on MACRO for each supervising protocol
1. Get the exact string for each protocol (**snmpwalk | grep scb\_**)
***=> See first image***
2. Add values on MACRO for each protocol
***=> See second image***
SECURITEShell_Control_Box_Services- Ping DeviceSIMPLEicmpping[,2]30{last()}<>1Ping {HOST.HOST1} KOHIGH
- Name MachineSNMP_AGENTSNMPv2-MIB::sysName.0SNMP-NameMachine36000TEXTNAME
- Nombre de ProcessusSNMP_AGENT.1.3.6.1.2.1.25.1.6.0SNMP-Number-Processus60
- Nombre Utilisateurs ConnectesSNMP_AGENT.1.3.6.1.2.1.25.1.5.0SNMP-Number-User-Connected60
- Process indexerservice - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerservice"]SNMP-Process-indexerservice-Perf-CPU60Shell_Control_Box_Services
- Process indexerservice - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerservice"]SNMP-Process-indexerservice-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process indexerservice - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerservice"]SNMP-Process-indexerservice-Status60Shell_Control_Box_Services{last()}<>2Service indexerservice not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service indexerservice not running on {HOST.HOST1}WARNING
- Process indexerworker - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerworker"]SNMP-Process-indexerworker-Perf-CPU60Shell_Control_Box_Services
- Process indexerworker - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerworker"]SNMP-Process-indexerworker-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process indexerworker - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunPath", "/usr/bin/indexerworker"]SNMP-Process-indexerworker-Status60Shell_Control_Box_Services{last()}<>2Service indexerworker not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service indexerworker not running on {HOST.HOST1}WARNING
- Process Supervising scb_http - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_HTTP}"]SNMP-Process-Supervising_scb_http-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_http - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_HTTP}"]SNMP-Process-Supervising_scb_http-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_http - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_HTTP}"]SNMP-Process-Supervising_scb_http-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_http not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_http not running on {HOST.HOST1}WARNING
- Process Supervising scb_ica - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_ICA}"]SNMP-Process-Supervising_scb_ica-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_ica - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_ICA}"]SNMP-Process-Supervising_scb_ica-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_ica - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_ICA}"]SNMP-Process-Supervising_scb_ica-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_ica not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_ica not running on {HOST.HOST1}WARNING
- Process Supervising scb_rdp - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_RDP}"]SNMP-Process-Supervising_scb_rdp-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_rdp - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_RDP}"]SNMP-Process-Supervising_scb_rdp-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_rdp - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_RDP}"]SNMP-Process-Supervising_scb_rdp-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_rdp not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_rdp not running on {HOST.HOST1}WARNING
- Process Supervising scb_ssh - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_SSH}"]SNMP-Process-Supervising_scb_ssh-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_ssh - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_SSH}"]SNMP-Process-Supervising_scb_ssh-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_ssh - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_SSH}"]SNMP-Process-Supervising_scb_ssh-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_ssh not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_ssh not running on {HOST.HOST1}scb_sshWARNING
- Process Supervising scb_telnet - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_TELNET}"]SNMP-Process-Supervising_scb_telnet-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_telnet - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_TELNET}"]SNMP-Process-Supervising_scb_telnet-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_telnet - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_TELNET}"]SNMP-Process-Supervising_scb_telnet-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_telnet not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_telnet not running on {HOST.HOST1}WARNING
- Process Supervising scb_vnc - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_VNC}"]SNMP-Process-Supervising_scb_vnc-Perf-CPU60Shell_Control_Box_Services
- Process Supervising scb_vnc - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_VNC}"]SNMP-Process-Supervising_scb_vnc-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process Supervising scb_vnc - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "{$STRING_SERVICE_VNC}"]SNMP-Process-Supervising_scb_vnc-Status60Shell_Control_Box_Services{last()}<>2Service Supervising scb_vnc not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service Supervising scb_vnc not running on {HOST.HOST1}WARNING
- Process workercontroller - Perf CPUSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfCPU["index","HOST-RESOURCES-MIB::hrSWRunParameters", "/usr/bin/workercontroller.py --config-file /etc/indexer/indexerworker.cfg"]SNMP-Process-workercontroller-Perf-CPU60Shell_Control_Box_Services
- Process workercontroller - Perf MemorySNMP_AGENTHOST-RESOURCES-MIB::hrSWRunPerfMem["index","HOST-RESOURCES-MIB::hrSWRunParameters", "/usr/bin/workercontroller.py --config-file /etc/indexer/indexerworker.cfg"]SNMP-Process-workercontroller-Perf-Memory60Result in KbytesShell_Control_Box_Services
- Process workercontroller - StatusSNMP_AGENTHOST-RESOURCES-MIB::hrSWRunStatus["index","HOST-RESOURCES-MIB::hrSWRunParameters", "/usr/bin/workercontroller.py --config-file /etc/indexer/indexerworker.cfg"]SNMP-Process-workercontroller-Status60Shell_Control_Box_Services{last()}<>2Service workercontroller not CORRECTLY running on {HOST.HOST1}WARNING{nodata(70)}=1Service workercontroller not running on {HOST.HOST1}WARNING
- System DescriptionSNMP_AGENTSNMPv2-MIB::sysDescr.0SNMP-SysDescr36000TEXT
- Snmp AvailabilityINTERNALzabbix[host,snmp,available]60{last()}<>1SNMP {HOST.HOST1} KOHIGH
CPUSNMP_AGENTdiscovery[{#SNMPVALUE},HOST-RESOURCES-MIB::hrProcessorLoad]snmp.CPU.discovery60CPU {#SNMPINDEX} - ChargeSNMP_AGENTHOST-RESOURCES-MIB::hrProcessorLoad.{#SNMPINDEX}SNMP-Charge-CPU-[{#SNMPINDEX}]60CPU {#SNMPINDEX} - EtatSNMP_AGENTHOST-RESOURCES-MIB::hrDeviceStatus.{#SNMPINDEX}SNMP-Etat-CPU-[{#SNMPINDEX}]60CPU {#SNMPINDEX} - NameSNMP_AGENTHOST-RESOURCES-MIB::hrDeviceDescr.{#SNMPINDEX}SNMP-Name-CPU-[{#SNMPINDEX}]36000TEXTFile SystemSNMP_AGENTdiscovery[{#SNMPVALUE},.1.3.6.1.2.1.25.2.3.1.3]snmp.filesystem.discovery60File System {#SNMPVALUE} - Used PercentageCALCULATEDFile-System-Space-Used-Percentage-[{#SNMPVALUE}]60100*(last(SNMP-File-System-Space-Used-[{#SNMPVALUE}])/last(SNMP-File-System-Space-Allocated-[{#SNMPVALUE}])){last()}>=99Free Space File System {#SNMPVALUE} -< 1%- on {HOST.HOST1}HIGH{last()}>=95Free Space File System {#SNMPVALUE} -< 5%- on {HOST.HOST1}AVERAGE{last()}>=90Free Space File System {#SNMPVALUE} -< 10%- on {HOST.HOST1}WARNINGFile System {#SNMPVALUE} - Espace AlloueSNMP_AGENT.1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}SNMP-File-System-Space-Allocated-[{#SNMPVALUE}]60File System {#SNMPVALUE} - Espace UtiliseSNMP_AGENT.1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}SNMP-File-System-Space-Used-[{#SNMPVALUE}]60NetworkSNMP_AGENTdiscovery[{#SNMPVALUE},IF-MIB::ifName]snmp.network.discovery60Interface [{#SNMPVALUE}] - IN OctetsSNMP_AGENTIF-MIB::ifInOctets.{#SNMPINDEX}SNMP-Interface-IN-Octets-[{#SNMPVALUE}]60Interface [{#SNMPVALUE}] - MACSNMP_AGENTIF-MIB::ifPhysAddress.{#SNMPINDEX}SNMP-Interface-MAC-[{#SNMPVALUE}]36000TEXTInterface [{#SNMPVALUE}] - MTUSNMP_AGENTIF-MIB::ifMtu.{#SNMPINDEX}SNMP-Interface-MTU-[{#SNMPVALUE}]3600Interface [{#SNMPVALUE}] - Operational StatusSNMP_AGENTIF-MIB::ifOperStatus.{#SNMPINDEX}SNMP-Interface-Op-Status-[{#SNMPVALUE}]600{last()}=0Interface [{#SNMPVALUE}] on {HOST.HOST1} - DOWNAVERAGEInterface [{#SNMPVALUE}] - OUT ErrorsSNMP_AGENTIF-MIB::ifOutErrors.{#SNMPINDEX}SNMP-Interface-OUT-Errors-[{#SNMPVALUE}]60Interface [{#SNMPVALUE}] - OUT OctetsSNMP_AGENTIF-MIB::ifOutOctets.{#SNMPINDEX}SNMP-Interface-OUT-Octets-[{#SNMPVALUE}]60Interface [{#SNMPVALUE}] - SpeedSNMP_AGENTIF-MIB::ifSpeed.{#SNMPINDEX}SNMP-Interface-Speed-[{#SNMPVALUE}]3600Interface [{#SNMPVALUE}] - TypeSNMP_AGENTIF-MIB::ifType.{#SNMPINDEX}SNMP-Interface-Type-[{#SNMPVALUE}]36000{$SNMP_COMMUNITY}{$SNMP_PORT}161{$STRING_SERVICE_HTTP}--as scb_http --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --gi{$STRING_SERVICE_ICA}--as scb_ica --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --gid{$STRING_SERVICE_RDP}--as scb_rdp --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --gid{$STRING_SERVICE_SSH}--as scb_ssh --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --gid{$STRING_SERVICE_TELNET}--as scb_telnet --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --{$STRING_SERVICE_VNC}--as scb_vnc --threads 1500 --stack-size 256 --process-mode safe-background --verbose 4 --log-tags --log-escape --uid zorp --gid