Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

OpenStack

The JSA DSM for OpenStack collects event logs from your OpenStack device.

The following table identifies the specifications for the OpenStack DSM:

Table 1: OpenStack DSM Specifications

Specification

Value

Manufacturer

OpenStack

DSM name

OpenStack

RPM file name

DSM-Open StackCeilometer-JSA_version-build_number.noarch .rpm

Supported versions

v 2015.1

Protocol

HTTP Receiver

Recorded event types

Audit event

Automatically discovered?

No

Includes identity?

No

Includes custom properties?

No

More information

OpenStack website (http://www.openstack.org/)

To send events from OpenStack to JSA, complete the following steps:

  1. If automatic updates are not enabled, download and install the most recent version of the following RPMs from the https://support.juniper.net/support/downloads/ onto your JSA console:

    • PROTOCOL-HTTPReceiver RPM

    • OpenStack DSM RPM

  2. Add an OpenStack log source on the JSA Console. The following table describes the parameters that are required to collect OpenStack events:

    Table 2: OpenStack Log Source Parameters

    Parameter

    Value

    Log Source type

    OpenStack

    Protocol Configuration

    HTTPReceiver

    Communication Type

    HTTP

    Listen Port

    The port number that OpenStack uses to communicate with JSA.

    Note:

    Do not use Port 514. Port 514 is used by the standard Syslog listener.

    Message Pattern

    ^\{"typeURI

  3. Configure your OpenStack device to communicate with JSA.

The following table provides a sample event message for the OpenStack DSM:

Note:

Due to formatting issues, paste the message format into a text editor and then remove any carriage return or line feed characters.
Table 3: OpenStack Sample Message Supported by the OpenStack Device

Event name

Low level category

Sample log message

Lists details for all servers

Read activity attempted

 
{"typeURI": "http://schemas
.dmtf.org/cloud/audit/1.0/event",
"eventTime": "2014-12-09T00:18:52.
063878+0000", "target": {"typeURI":
"service/compute/servers/detail",
"id": "openstack:xxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxx", "name": "nova",
"addresses": [{"url": "http://
<IP_address>:8774/v2/xxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxx", "name": "admin"},
{"url": "http://<IP_address>:8774/v2/
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"name": "private"}, {"url": "http:
//<IP_address>:8774/v2/xxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxx", "name":
"public"}]}, "observer": {"id":
"target"}, "tags": ["correlation_
id?value=openstack:xxxxxxxx-xxxxxxxx-
xxxx-xxxxxxxxxxxx"],
"eventType": "activity",
"initiator": {"typeURI":
"service/security/account/user",
"name": "admin", "credential":
{"token": "xxxx xxxxxxxx xxxx",
"identity_status": "Confirmed"},
"host": {"agent": "pythonnovaclient",
"address": "<IP_address>"},
"project_id": "openstack:xxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxx", "id":
"openstack:xxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxx"}, "action": "read/list",
"outcome": "pending", "id":
"openstack:xxxxxxxx-xxxx-xxxxxxxx-
xxxxxxxxxxxx",