Dec 10, 2021
11:20 AM
@schandran , I have the report and have found that all of the ~290 Solaris servers are indeed there. But all except for 5 records have duplicate serial. Other sources bring in duplicate serial numbers but let's say this one doesn't. There still should be 5 (the ones with unique serial) that come across. Any thoughts?
... View more
Jul 21, 2021
03:56 PM
1 Kudo
Greetings. There are over 290 Solaris servers in Tanium but none are coming over to FNM. Looking at a few of these servers, I see that there is an app installed (which is another issue). Thinking if there were zero apps instead of the one (the Tanium client - go figure), this may be an expected outcome but there is at least one app. Anyone seen this? On the only-one-app issue, anyone have any ideas there? Do those servers require file evidence gathering turned on in Tanium? Is there no Solaris package manager? (Sorry, not a *NIX guy). Thanks, Rob
... View more
Jan 21, 2021
10:32 AM
Many thanks @kclausen ! I've not done anything with this connector but seems like it would be a similar solution if SCCM inventory were needed from the disconnected network. So here's my follow-up question: the SCCM data is (of course) inclusive of the actual device inventory. Is that the case where the ILMT data is concerned? Rob
... View more
Jan 20, 2021
05:03 PM
Greetings. My client has much IBM product in a network that is months out (or longer) from being integrated. Is there any way the ILMT could be brought over sneaker-net and used with FNMS? Any possibilities? Thanks, Rob
... View more
Labels
- Labels:
-
IBM
Oct 08, 2020
12:09 PM
Thanks @ChrisG ! Wow, there is a surprise here though. I know with the Java paid license issue, the agent is quite capable to figure things out. But are you saying I need to advise the client that the agent should be installed on all UNIX-like servers where Java is installed? Alternatively, if Tanium is installed on these servers, would that be a acceptable? Thanks, Rob
... View more
Oct 07, 2020
07:51 AM
2 Kudos
Greetings! My client has great inventory coverage with SCCM for all Windows devices and Tanium w. Asset Module for everything (which we will use for all non-Windows OSs). They also have a significant footprint of Oracle and IBM products. It is here where we seek to selectively deploy the FlexNet Agent. Here are my questions. Oracle: Of all Oracle software out there, is the Agent only needed for databases? Or are there any other Oracle software titles where the Agent is equally recommended. IBM: There is installed product on Windows and *NIX. They seek to use the Agent instead of ILMT. What titles have sub-capacity reporting requirements where the Agent would be needed? We could say, for all servers that have *any* server-side IBM or Oracle^ products installed - use the Agent. But we'd like to be uber selective in where we deploy the Agent and have SCCM\Tanium provide all else. Thanks, Rob A ^ Of course, we understand that Java isn't reason for full Agent deployment.
... View more
May 21, 2020
12:30 PM
1 Kudo
@ChrisG , @sunilkumar , your guru'ness is respectfully requested. I've followed in the footsteps of my team mates @dbeckner and @dcopher and went through the process of bringing in Tanium inventory. BLUF: I have successfully ran a compliance import with the Tanium connection made in the Beacon that is co-located with FNM. I'm confused as to the requirement that the connection be made on a different, external beacon. It does not say this anywhere in the Inventory Adapters and Connectors reference. That said, in the section called "Configure FlexNet Beacon to connect with Tanium", step 8 walks one through scheduling the connection which isn't possible on the co-located beacon. As well, step 11 has one execute which also isn't possible. I am using the same Tanium instance as the Dans did prior (I've set up a second Destination to a different database and have yet another svc account with Asset User rights). Things seem to be working. So I'm thinking this is an allowable practice now (newer connector version?) and the documentation is wrong (or not updated)? Many thanks for your consideration, Rob
... View more
May 11, 2020
09:01 AM
1 Kudo
Sounds like your issue is with queuing up the data for import into the target. In my case, there's a AD group populated with computers. The service account doing the adoption has local admin rights on those exact computers. Couldn't have a better basis for the underlying target used for agent adoption! There is an issue where it is sometimes the case that the device hasn't been discovered but is still able to be adopted. In this situation, one can't add a hostname to a target but one can add the IP. All manageable. I'm working with Teemu on a solution for using BAS with the target. If interested, and if he agrees since he's the one mostly doing this, we can share. Rob
... View more
Apr 30, 2020
10:38 AM
2 Kudos
@mrichardson Thanks Matt for describing where things are in the database. I had looked at these very tables but was confused because it would seem the storage of the entry is in a different table depending on if it was a IP vs. site\subnet vs. hostname. I put on the brakes and came here. @dsalter , very interesting use case indeed! Have you put a solution together? @TeemuK , have you by chance found the adapter? Using BAS is what I was thinking. Here is my situation: We are deploying the FlexNet agent via adaption to all servers. The account empowered to adopt is (say) cnet\FNMAgentInstallerEast. There is an AD group called DataCenterEast.Servers which have (say) 1000 servers in it... updated daily so it is always changing (servers being added and removed). We use the below PowerShell to get these servers and more important, their assigned IP address # Get each hostnames from AD group DataCenterEast.Servers $computerlist = Get-ADGroupMember DataCenterEast.Servers | Select-Object Name # Get IP for each hostname and output to csv (computersips.csv) foreach ($computer in $computerlist) { [system.net.Dns]::GetHostAddresses("$computer") | Foreach-Object { add-content -path C:\temp\computersips.csv -value "$computer,$($_.IPAddressToString)" } } The resulting csv is the source data we'd like to use to populate the target. Hostname would be more human-readable but, because we can't guarantee that the server has been discovered (hence, you're not allowed to add by hostname in the target), we are fine with using IP. Note: I could do a join with discovered devices table and make it Hostname if discovered or IP if not but that can be v2 -- just looking to keep it simple to start! The cool thing is that, where a customer would do such a thing like populate an AD group with the servers the installing account has purview over, the target that could be created would be "DataCenterEast (FNMAgentInstallerEast)" and it would be understood and expected that each server be properly and swiftly adopted. The AS-IS method: add each IP manually. Any thoughts would be appreciated and especially if there's been something done adapter-wise that has produced this automation. Thanks, Rob A
... View more
Apr 30, 2020
10:02 AM
Greetings. A client has implemented the FlexNet agent via adoption within their data center. They have added AWS resources and seek to bring those servers in also. I have yet to fully understand (meeting in the coming days) but would think that we could use adoption from the single beacon that's co-located with the app server. It may be that we stand up a beacon in AWS - TBD. The documentation (section Planning your inventory beacons in the FNMSInvAdaptersAndConnectorsRef) makes the below comment when discussing push vs. pull. Situations for "push" -- "for the 'remote execution' tasks known as adoption and zero footprint inventory collection, neither of which you expect to use in a cloud environment." Maybe it's just the wording but would there be an issue using adoption? Thanks, Rob
... View more
Apr 07, 2020
05:03 PM
@DAWN \ anyone, Can you give an update on the Azure \ SQL Server aspect? It's been a year and I'm wondering if this has changed. The client is asking this and the mention SQL Server 2017 (but don't clearly say Azure SQL Server is at version 2017 - let's presume so). Then, which of the following database options should we be using: 1. Azure SQL Databases a. Single Database b. Database elastic pool c. Database Server 2. SQL Managed Instance 3. SQL Virtual Machines Thanks, Rob
... View more
Mar 25, 2020
02:15 PM
Greetings. I mostly work in environments where clients enable the disallowing of password storage. It's a medium STIG finding but it is often their default none-the-less. https://www.stigviewer.com/stig/windows_server_2012_member_server/2014-01-07/finding/V-3376 Question: WHY is it that the scheduled tasks run as the service account in the first place? I understand the concept of the beacon service running under the context of the service account but not so much why the scheduled tasks. The client is asking me to explain this and I'm not aware of the appropriate answer. Because that's just how .NET applications do it? Thanks, Rob
... View more
Mar 02, 2020
09:18 AM
2 Kudos
Greetings Forum! A client maintains all their servers in an Active Directory OU. They seek to have the agent deployed via adoption for all these servers. Target choice "Site or Subnet" would result in other devices trying to be adopted. Is there a way, via a business adapter or even SQL, to update an existing target syncing the devices, by hostname or IP, in the AD OU to the target? I can write some PowerShell to extract the needed information to a csv or staging database table. Just wondering if we can get the info to the target. Thanks, Rob Aaron
... View more
Feb 06, 2020
12:32 PM
Over 3,200 folders but only 6 are populated with log files, 6 from the last 6-8 days. All BaselinePurchaseCreation.log. While I'm not in the know on the purpose of the log itself (it obviously has some purpose), I'm just wondering if I've missed running some kind of clean up routine. Not complaint about excessive size on disk, but it seems crazy that so many folders are created and not cleaned up!
... View more
Latest posts by raaron1
Subject | Views | Posted |
---|---|---|
498 | Dec 10, 2021 11:20 AM | |
713 | Jul 21, 2021 03:56 PM | |
924 | Jan 21, 2021 10:32 AM | |
955 | Jan 20, 2021 05:03 PM | |
1067 | Oct 08, 2020 12:09 PM | |
1114 | Oct 07, 2020 07:51 AM | |
2531 | May 21, 2020 12:30 PM | |
1925 | May 11, 2020 09:01 AM | |
1379 | May 01, 2020 12:40 PM | |
2559 | Apr 30, 2020 10:38 AM |
Activity Feed
- Posted Re: Solaris/SunOS servers not coming in via Tanium Asset Connector on FlexNet Manager Forum. Dec 10, 2021 11:20 AM
- Got a Kudo for Solaris/SunOS servers not coming in via Tanium Asset Connector. Aug 11, 2021 03:06 AM
- Posted Solaris/SunOS servers not coming in via Tanium Asset Connector on FlexNet Manager Forum. Jul 21, 2021 03:56 PM
- Posted Re: ILMT integration possibilities from a disconnected network on FlexNet Manager Forum. Jan 21, 2021 10:32 AM
- Posted ILMT integration possibilities from a disconnected network on FlexNet Manager Forum. Jan 20, 2021 05:03 PM
- Posted Re: Where FlexNet Agent Counts\Most Appropriate on FlexNet Manager Forum. Oct 08, 2020 12:09 PM
- Kudoed Re: Where FlexNet Agent Counts\Most Appropriate for ChrisG. Oct 08, 2020 12:05 PM
- Got a Kudo for Where FlexNet Agent Counts\Most Appropriate. Oct 07, 2020 02:33 PM
- Got a Kudo for Where FlexNet Agent Counts\Most Appropriate. Oct 07, 2020 09:30 AM
- Posted Where FlexNet Agent Counts\Most Appropriate on FlexNet Manager Forum. Oct 07, 2020 07:51 AM
- Kudoed Re: FNMS + Tanium Import Error for sunilkumar. May 25, 2020 09:59 AM
- Got a Kudo for Re: FNMS + Tanium Import Error. May 21, 2020 01:51 PM
- Posted Re: FNMS + Tanium Import Error on FlexNet Manager Forum. May 21, 2020 12:30 PM
- Got a Kudo for Re: Populate Inventory Target through automation. May 15, 2020 05:13 AM
- Got a Kudo for Re: Populate Inventory Target through automation. May 11, 2020 09:51 AM
- Posted Re: Populate Inventory Target through automation on FlexNet Manager Forum. May 11, 2020 09:01 AM
- Got a Kudo for Re: Populate Inventory Target through automation. May 06, 2020 09:40 AM
- Posted Re: Gathering AWS Inventory via Adoption on FlexNet Manager Forum. May 01, 2020 12:40 PM
- Kudoed Re: Gathering AWS Inventory via Adoption for pwesthorp. May 01, 2020 12:39 PM
- Posted Re: Populate Inventory Target through automation on FlexNet Manager Forum. Apr 30, 2020 10:38 AM