An example HTTP sync config file


The actual batch file that copies configuration data from the main BMC Defender Server to the backup server (referenced in preceding steps of 3 & 4 ) can take many forms. The actual batch file depends upon files that are required for redundancy, and which utility you have selected for web access.

If the site is using wget.exe to get the configuration data, a batch file suitable for use is available as follows, and might be cut and pasted to the HTTP_SYNC_CONFIG.bat file for immediate application.

@ECHO OFF

REM: # HTTP_SYNC_CONFIG.bat

REM: # Copy configuration files from a remote CorreLog server to the
REM: # local CorreLog server using the external "wget.exe" utility.

REM: # This script uses the "wget.exe" utility, in the system directory
REM: # of this CorreLog installation, to copy and install configuration
REM: # data of a remote CorreLog server, thereby syncronizing this
REM: # server's configuration with another server.

REM: # At the remote server, the  "apache\conf\srm.conf" file should
REM: # be modified to contain the following directive, to permit HTTP
REM: # access to the remote configuation data: (Substitute the value
REM: # of "C:/CorreLog/config" with the actual pathname of the CorreLog
REM: # config folder.)

REM: # Alias /config     "C:/CorreLog/config/"

REM: # Set the value of the primary CorreLog Server below:

set SVR=remote-server-name

REM: # The remainder of the script file does not need to be modified.
REM: # Create a temporary directory to hold the files, and make sure
REM: # this temporary directory is empty.

if not exist wgettmp mkdir wgettmp
del /q /f /s wgettmp

REM: # Execute the wget command for each remote config file. On a bad
REM: # status indication, bypass further processing by jumping to the
REM: # handle_error routine.

wget -q http://%SVR%/config/actions.cnf    -O wgettmp/actions.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/alerts.cnf     -O wgettmp/alerts.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/alertd.cnf     -O wgettmp/alertd.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/calerts.cnf    -O wgettmp/calerts.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/color.cnf      -O wgettmp/color.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/devgrp.cnf     -O wgettmp/devgrp.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/devinfo.cnf    -O wgettmp/devinfo.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/excel.cnf      -O wgettmp/excel.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/facdef.cnf     -O wgettmp/facdef.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/filt.cnf       -O wgettmp/filt.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/filt.cnf       -O wgettmp/file.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/fmula.cnf      -O wgettmp/fmula.new
if %ERRORLEVEL% neq 0 goto handle_error


wget -q http://%SVR%/config/ipadd.cnf      -O wgettmp/ipadd.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/latch.cnf      -O wgettmp/latch.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/learn.cnf      -O wgettmp/learn.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/macros.cnf     -O wgettmp/macros.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/muekey.cnf     -O wgettmp/muekey.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/muexcl.cnf     -O wgettmp/muexcl.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/muser.cnf      -O wgettmp/muser.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/mumask.cnf     -O wgettmp/mumask.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/otext.cnf      -O wgettmp/otext.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/pass.cnf       -O wgettmp/pass.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/passx.cnf      -O wgettmp/passx.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/patts.cnf      -O wgettmp/patts.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/pivot.cnf      -O wgettmp/pivot.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/pivparm.cnf    -O wgettmp/pivparm.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/rss.cnf        -O wgettmp/rss.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/sever.cnf      -O wgettmp/sever.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/slparms.cnf    -O wgettmp/slparms.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/smtp.cnf       -O wgettmp/smtp.cnf
if %ERRORLEVEL% neq 0 goto handle_error
wget -q http://%SVR%/config/sparms.cnf     -O wgettmp/sparms.cnf
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/t-actions.cnf  -O wgettmp/t-actions.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/threads.cnf    -O wgettmp/threads.new
if %ERRORLEVEL% neq 0 goto handle_error

wget -q http://%SVR%/config/ticparm.cnf    -O wgettmp/ticparm.cnf
if %ERRORLEVEL% neq 0 goto handle_error

REM: # All the files were successfully fetched. Copy the files from
REM: # The "wgettmp" folder to the actual configuration folder. This
REM: # is sufficient to install the configuration data at this site.
REM: # when finished, send a syslog message and exit.

copy /y .\wgettmp\* ..\config
sendlog.exe %SVR% "HTTP_SYNC_CONFIGbat - Files synchronized." 6 5
goto exit
:handle_error

REM: # An error was encountered. The "wget.exe" program returned a
REM: # bad status when getting files. The remote server may be down
REM: # or otherwise misconfigured. The batch file can be manually
REM: # executed at a command prompt with ECHO ON in order to determine
REM: # the error.

REM: # Send a syslog message to indicate the error condition and exit.

sendlog.exe %SVR% "HTTP_SYNC_CONFIG.bat Errors Detected. Bypassed." 3 5

:exit
REM: # Normal exit.

You can cut and paste the preceding batch file into a file, and install the wget.exe program in the system directory, to periodically pull configuration data from one BMC Defender Server to another.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Defender SIEM Correlation Server 6.0