Configuring the IBM HMC to send events to BMC Defender Server

(SPE2401)

On a system with BMC Defender Server, you can configure the IBM Hardware Management Console (HMC) to send events to BMC Defender Server through SNMP traps.

A system administrator must configure the HMC and a product administrator must configure BMC Defender Server.

Related topics

SNMP-Trap-Monitor

Default-dashboards-and-templates

Before you begin

Make sure that you have the TCP/IP address of BMC Defender Server.

To configure the HMC to send events to BMC Defender Server through SNMP traps

Contact your organization's security administrator to configure the HMC as described in the following procedure.

  1. In the Customize API Settings window on the HMC, select the SNMP tab.
  2. Select Enable and enter the TCP/IP address and port number of BMC Defender Server, as displayed in the following image:
    hmc_config.png
  3. In the Event Notification Information window, activate the events that you want to send to BMC Defender Server, as displayed in the following image:
    hmc_eventNotification.png
    For more information, see the IBM Z Series Hardware Management Console documentation.

To configure the BMC Defender Server correlation thread

  1. To create a correlation thread in BMC AMI Command Center for Security, navigate to Correlation > Threads > Add New. 

  2. In the Match Expression box, enter IBM TRAP, as displayed in the following image:

    newCorrelationThreads.png

  3. Click Save.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*