Connect this data source on your own, using the Hunters platform.
TL;DR
Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
|---|---|---|---|---|---|---|---|
Dell iDrac Logs | ✅ | ✅ | ✅ | dell_idrac_logs | nested-json-text | S3-LIST |
Overview
Dell Technologies is a global enterprise technology and personal computing company that provides end-to-end IT solutions spanning from edge computing to core data centers and multicloud environments. Its comprehensive portfolio includes client devices, AI-optimized and traditional servers, enterprise data storage systems, networking hardware, and cybersecurity solutions, alongside managed IT and lifecycle services. Dell helps organizations modernize their IT infrastructure, support demanding artificial intelligence workloads, enable workforce transformation, and drive performance, scalability, and operational efficiency across the digital landscape.
Supported data types
DELL iDRAC LOGS
Overview:
Dell iDRAC (Integrated Dell Remote Access Controller) is a proprietary out-of-band management platform integrated directly into Dell PowerEdge servers. It functions entirely independently of the host operating system or hypervisor, allowing IT administrators to deploy, update, monitor, and maintain server infrastructure remotely. iDRAC provides a centralized interface for advanced server management, supporting various administrative protocols and offering essential features like virtual console access, power cycling, automated lifecycle management, and deep hardware telemetry.
Dell iDRAC logs capture detailed operational, security, and hardware-level events across the server environment, providing critical insights into component health, thermal and power anomalies, configuration changes, and authentication attempts to support proactive monitoring, auditing, and hardware-level troubleshooting.
Table name: dell_idrac_logs
Send data to Hunters:
Hunters supports the ingestion of Dell iDrac logs via an intermediary AWS S3 bucket.
To connect Dell iDrac logs via S3:
Export your logs from Dell iDrac logs to an AWS S3 bucket.
Once the export is completed and the logs are collected to S3, follow the steps in this section.
Expected format
Logs are expected in Nested JSON Text format:
{"message":"<174>2024-07-07T05:00:49.473226-05:00 host-01 Severity: Informational, Category: Audit, MessageID: ABC087, Message: The SupportAssist Collection Job JID_000000000000 is successfully created.","src_ip":"10.0.0.1","src_host":"host-01.example.global"}
{"message":"<14>Jul 7 00:03:23 host-02: host-02: 00000006.00000001 00000002 Tue Jul 07 2024 00:03:22 -05:00 [kern_audit:info:1122] 12030000000000001 :: svm1:http :: 10.0.0.2:56880 :: svm1-cifs:EXAMPLE\\svc_user :: PATCH /api/protocols/fpolicy/00000000-0000-0000-0000-000000000000/connections/11111111-1111-1111-1111-111111111111/Varonis/10.0.0.3 : {\"state\":\"connected\"} :: Success: ","src_ip":"10.0.0.1","src_host":"host-02.example.global"}