Hello,

I need to take the data from the Sophos Central Admin web interface. According to Sophos, the procedure indicated on this page must be followed: https://github.com/sophos/Sophos-Central-SIEM-Integration The problem is that I cannot modify the script correctly or finish the configuration to add the new sensor.

Thank you

Regards, Mariano


Article Comments

Hello Mariano,

Thank you for your post.

Could you please explain in more details, what issues are you experiencing when creating a script sensor?


Oct, 2018 - Permalink

Hello Isidora, Thanks for the answer, the problem is not how to create the script, you do not have to select the options, according to what Sophos indicates in the mentioned link. Sophos Central Admin is a web interface for the administration of the computers that have the antivirus installed, both server and endpoint.

regards


Oct, 2018 - Permalink

Hi Mariano,

Could you please elaborate in more details what exactly do you want to monitor?

What exactly have you done so far? And where are you stuck?


Oct, 2018 - Permalink

Hello,

I was trying to create a sensor of Python Script Advanced Sensor, I added this sensor in the equipment where the PRTG is installed, when wanting to configure it I found that I do not know which options to select. I understand that the script file must be saved in the \ Custom Sensors \ python folder. About the sensor configuration I do not understand how to complete the following: parent tags, tags, security context, device credentials, additional parameters, mutex name, etc. That's why I need some help.

Sophos Central is a web-hosted solution which offers protection for users across all their devices and for servers and is the tool that lets administrators manage protection, enforce policies, take action against threats, and generate reports.

Thank you

Regards


Oct, 2018 - Permalink

Hello Mariano,

Thank you for the clarification.

Please note that you don't need to fill in all settings within the Python Script Advanced Sensor, as not all of them are relevant for the sensor operations.

For example, you can leave the fields "Parent Tags" and "Tags" as they are.

By default, the sensor uses security context of probe service (Windows system user account).

Under "Device Credentials" you can define if you want to transmit device credentials to the Python script (e.g. if Windows or Linux or SNMP credentials are needed).

"Additional parameters" depend on the script; if they are not needed, you can leave this field empty.

You can also leave the field "Mutex Name" empty.

So, the only crucial parameter in the sensor settings is the python script. Please make sure the script is stored under "C:\Program Files (x86)\PRTG Network Monitor\Custom Sensors\python" on the PRTG Probe.

For detailed information about all parameters and settings of this sensor, please see this page: Python Script Advanced Sensor

Best regards


Oct, 2018 - Permalink

Hi Isidora

I understand what you explain to me, could you help me in how to configure the python script? according to what Sophos indicates in the link of my initial post. Thank you very much for your help regards


Oct, 2018 - Permalink

Hi there,

Unfortunately, we can't really do that. I suspect that you must build something around the script to give out for PRTG readable and understandable output. The output that is generated by the script itself is most likely not according to PRTGs syntax. You can find the correct syntax in your webinterface under "Setup > PRTG API > Custom Sensors".

Best regards.


Oct, 2018 - Permalink

ok, Thanks very much, i will try to do it

Regards


Oct, 2018 - Permalink