OpenStack
The JSA DSM for OpenStack collects event logs from your OpenStack device.
The following table identifies the specifications for the OpenStack DSM:
Table 1: OpenStack DSM Specifications
Specification | Value |
|---|---|
Manufacturer | OpenStack |
DSM name | OpenStack |
RPM file name |
|
Supported versions | v 2015.1 |
Protocol | HTTP Receiver |
Recorded event types | Audit event |
Automatically discovered? | No |
Includes identity? | No |
Includes custom properties? | No |
More information | OpenStack website (http://www.openstack.org/) |
To send events from OpenStack to JSA, complete the following steps:
If automatic updates are not enabled, download and install the most recent version of the following RPMs on your JSA console:
PROTOCOL-HTTPReceiver RPM
OpenStack DSM RPM
Add an OpenStack log source on the JSA Console. The following table describes the parameters that are required to collect OpenStack events:
Table 2: OpenStack Log Source Parameters
Parameter
Value
Log Source type
OpenStack
Protocol Configuration
HTTPReceiver
Communication Type
HTTP
Listen Port
The port number that OpenStack uses to communicate with JSA.
Note: Do not use Port 514. Port 514 is used by the standard Syslog listener.
Message Pattern
^\{"typeURI
Configure your OpenStack device to communicate with JSA.
The following table provides a sample event message for the OpenStack DSM:
Table 3: OpenStack Sample Message Supported by the OpenStack Device
Event name | Low level category | Sample log message |
|---|---|---|
Lists details for all servers | Read activity attempted | {"typeURI": "http://schemas
.dmtf.org/cloud/audit/1.0/event",
"eventTime": "2014-12-09T00:18:52.
063878+0000", "target": {"typeURI":
"service/compute/servers/detail",
"id": "openstack:4b2eb8813bc243038
cbbb307b7daaaaa", "name": "nova",
"addresses": [{"url": "http://1.2.
3.4:8774/v2/c99506ed278e49f49080ff
1a8a5aaaaa", "name": "admin"},
{"url": "http://1.2.3.4:8774/v2/
c99506ed278e49f49080ff1a8a5aaaaa",
"name": "private"}, {"url": "http:
//1.2.3.4:8774/v2/c99506ed278e49f
49080ff1a8a5aaaaa", "name":
"public"}]}, "observer": {"id":
"target"}, "tags": ["correlation_
id?value=openstack:d0837d49-688d-
4fe0-a166-f362d09caaaa"],
"eventType": "activity",
"initiator": {"typeURI":
"service/security/account/user",
"name": "admin", "credential":
{"token": "74c0 xxxxxxxx aaaa",
"identity_status": "Confirmed"},
"host": {"agent": "python-
novaclient", "address": "1.2.3.4"},
"project_id": "openstack:c99506ed
278e49f49080ff1a8a5aaaaa", "id":
"openstack:460d1061b1ad4e3cb492
e22e5daaaaa"}, "action": "read/list",
"outcome": "pending", "id":
"openstack:0400ce73-2058-4bcd-
bd1b-cbbba9faaaaa", |