asc monitor

Perform CloudControl monitoring management.

Syntax

asc monitor [options]

Options for asc monitor command

Option	Description
-a, --fileaudit [--config] [--system] [--verbose]	Audits the local filesystem to identify possible intrusions. This option invokes the Advanced Intrusion Detection Environment (AIDE) using CloudControl validated reference data. CloudControl maintains two different AIDE databases for file system integrity: config—includes files that change as part of normal system functionality, for example, when you enable or disable a feature. system—includes all other files in the system. By default, this command runs against both databases. If you specify one, the command only runs against the specified database. The output is sent to syslog as well as to the console.
-P, --fileprofile [--config] [--system]	Recreates the reference database used by AIDE based on the current contents of the file system. You can specify the config or system database, or recreate both. Note: To prevent unauthorized editing of the database, after you run the --fileprofile command, you will receive a "archive file is corrupt" warning the next time you run the --fileaudit command. Contact support@hytrust.com to remove this warning.
--filemon {on|off} [--filemoninterval <minutes>]	Enables automatic monitoring of file integrity using AIDE. This option enables or disables a cron job that runs the asc monitor --fileaudit command, and is disabled by default. When you enable the job, it will run every 24 hours using your cron schedule. You can change the frequency by entering the number of minutes using the optional --filemoninterval option. Note: You cannot specify the config or system databases in a cron job.
-c, --community <string>	Specify the SNMP community string.
-e, --email <email_address>	Set an email address where system notifications will be sent.
-f, --force	Ignore failed connection attempts to mail servers and SNMP trap recipient hosts.
-H, --health	Perform a health check on the CloudControl.
-h, --help	Display usage text.
-k, --network {on|off}	Enable (on) or disable (off) network resource monitoring (NRM) via port scanning of the network service ports that the CloudControl depends on (i.e., DNS, NTP, SMPT, SNMP, syslog, and Active Directory). NRM is enabled by default.
-l, --trial	Send an SNMP, SMTP, and syslog test alert notice. Include the --message option to send a specific message.
-m, --message <message>	Specify the message to use in log files and configuration file change journals for monitoring related activities. If the message contains spaces, you must surround it by single or double quotation marks.
-n, --snmp {on|off}	Enable (on) or disable (off) the SNMP service.
-p, --protected {on|off}	Enable (on) or disable (off) protected host monitoring (PHM), via ICMP ping, for CloudControl protected hosts (ESXi, VC, etc). PHM is disabled by default.
-s, --server <smtp_server>	Set the SMTP server to use for sending email notifications.
-t, --trap <trap_host>	Set an SNMP Trap recipient host.
-u, --status	Display a report showing service, resource state, and monitoring configuration.
-v, --verbose	Enable verbose output.

Examples

Perform an audit of the local CloudControl filesystem:

asc monitor --fileaudit

Perform an audit of the config database in the local CloudControl filesystem:

asc monitor --fileaudit --config

Recreate the AIDE reference database: 

asc monitor --fileprofile

Set the asc monitor --fileprofile job to run every 120 minutes.

asc monitor --filemon on --filemoninterval 120

Set the SMTP notification server and target address:

asc monitor -s mail.foo.com -e user@foo.com

Enable the SNMP server and set its community and trap recipient host:

asc monitor -n on -c public -t 1.2.3.4

Send an SMTP and SNMP test with a message:

asc monitor -l -m 'Hello monitoring systems'

View a system status report:

asc monitor --status

Set an SMTP server:

asc monitor -s smtp.foo.com

Set a single SNMP Trap recipient host:

asc monitor -t trapd.foo.com

Set two SNMP Trap recipient hosts:

asc monitor -t trapd.foo.com -t trapd2.foo.com

Enable the SNMP server:

asc monitor -n on

Disable the SNMP server:

asc monitor -n off

Set the SNMP community string:

asc monitor -c public

or

asc monitor -c othercommunity

Specify a single email address where notifications will be sent:

asc monitor -e admin@foo.com

Specify three email addresses where notification will be sent:

asc monitor -e admin@foo.com -e other@foo.com -e third@elsewhere.org

Disable network resource monitoring (NRM):

asc monitor --network off

Enable protected host monitoring (PHM):

asc monitor --protected on