Skip to content

Commit

Permalink
fix(OHI OCSF): Added TW edits
Browse files Browse the repository at this point in the history
  • Loading branch information
nbaenam committed Sep 18, 2024
1 parent 9e2eba2 commit 3bf5d74
Show file tree
Hide file tree
Showing 3 changed files with 32 additions and 26 deletions.
Original file line number Diff line number Diff line change
@@ -1,26 +1,29 @@
---
title: OCSF integration
tags:
- New Relic integrations
- OCSF integration
- New Relic integrations
- OCSF integration
metaDescription: Use New Relic infrastructure agent to get a dashboard with metrics from your OCSF format data.
freshnessValidatedDate: never
freshnessValidatedDate: 2024-09-18
---
import ocsfDashboard from 'images/ocsf-dashboard.webp'


Monitor OCSF data seamlessly with New Relic for comprehensive insights into security-related data from various sources, facilitating threat detection, incident response, and compliance.
Monitor OCSF data seamlessly with New Relic for comprehensive visibility into security-related data from multiple sources to facilitate threat detection, incident response, and compliance.

<img
title="OCSF dashboard"
alt="OCSF dashboard"
src={ocsfDashboard}
title="OCSF dashboard"
alt="OCSF dashboard"
src="images/infrastructure_screenshot-full_ocsf-dashboard.webp"
/>

<figcaption>
After setting up our OCSF integration, we give you a dashboard for your OCSF metrics.
After setting up our OCSF integration, see your data in a dashboard right out of the box.
</figcaption>


## Set up the OCSF integration [#set-up-ocsf]

Complete the following steps to set up the OCSF integration:

<Steps>
<Step>
## Install the infrastructure agent [#infra-install]
Expand All @@ -29,9 +32,7 @@ To use the OCSF integration, you need to also [install the infrastructure agent]
</Step>
<Step>

## Enable the OCSF integration with nri-flex

To set up the OCSF integration, follow these steps:
## Enable the OCSF integration with `nri-flex` [#enable]

1. Create a file named `nri-ocsf.yml` in the integrations directory:

Expand All @@ -40,6 +41,7 @@ To set up the OCSF integration, follow these steps:
```

2. Add the following snippet to your `nri-ocsf.yml` file to enable the agent to capture OCSF data:

```yml
integrations:
- name: nri-flex
Expand All @@ -58,27 +60,29 @@ To set up the OCSF integration, follow these steps:
</Step>

<Step>
## Restart the New Relic infrastructure agent

Restart your infrastructure agent:
## Restart the New Relic infrastructure agent [#restat-agent]

Use the instructions in our [infrastructure agent docs](/docs/infrastructure/install-infrastructure-agent/manage-your-agent/start-stop-restart-infrastructure-agent/) to restart your infrastructure agent. This is command that should work for most people:

```shell
sudo systemctl restart newrelic-infra.service
```

In a couple of minutes, your application will begin sending metrics to [one.newrelic.com](https://one.newrelic.com).
</Step>
<Step>
## Find your data

## Find your data [#find-data]

You can use our pre-built dashboard template to monitor your OCSF application metrics. Follow these steps to use our pre-built dashboard template:

1. Go to **[one.newrelic.com](https://one.newrelic.com/) > + Integrations & Agents**.
2. Click on the **Dashboards** tab.
3. In the search bar, type `OCSF`
4. The OCSF dashboard should appear. Click on it to install it
1. Go to <DNT>**[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > + Integrations & Agents**</DNT>.

2. Select <DNT>**Dashboards**</DNT> to access the pre-built resources.

To instrument the OCSF quickstart and to see metrics and alerts, you can also follow our [OCSF quickstart page](https://newrelic.com/instant-observability/ocsf) by clicking on the `Install now` button.
3. Search <DNT>**OCSF**</DNT> and select the dashboard.

To instrument the OCSF quickstart and to see metrics and alerts, you can also follow our [OCSF quickstart page](https://newrelic.com/instant-observability/ocsf) by clicking on the <DNT>**Install now**</DNT> button.

Here is an example NRQL query to view the OCSF master uptime:

Expand All @@ -88,10 +92,12 @@ SELECT * FROM ocsfSampleEvent
</Step>
</Steps>

## What's next?
## What's next? [#whats-next]

To learn more about building NRQL queries and generating dashboards, check out these docs:

* [Introduction to the query builder](/docs/query-your-data/explore-query-data/query-builder/introduction-query-builder) to create basic and advanced queries.

* [Introduction to dashboards](/docs/query-your-data/explore-query-data/dashboards/introduction-dashboards) to customize your dashboard and carry out different actions.
* [Manage your dashboard](/docs/query-your-data/explore-query-data/dashboards/manage-your-dashboard) to adjust your dashboards display mode, or to add more content to your dashboard.

* [Manage your dashboard](/docs/query-your-data/explore-query-data/dashboards/manage-your-dashboard) to adjust your <InlinePopover type="dashboards"/> display mode, or to add more content to your dashboard.
4 changes: 2 additions & 2 deletions src/nav/infrastructure.yml
Original file line number Diff line number Diff line change
Expand Up @@ -150,8 +150,6 @@ pages:
path: /docs/infrastructure/host-integrations/host-integrations-list/apache-hadoop-monitoring-integration
- title: Apache Mesos integration
path: /docs/infrastructure/host-integrations/host-integrations-list/apache-mesos-integration
- title: OCSF Integration
path: /docs/infrastructure/host-integrations/host-integrations-list/ocsf-integration
- title: Apache Traffic Server integration
path: /docs/infrastructure/host-integrations/host-integrations-list/apache-traffic-server-monitoring-integration
- title: Apache Zookeeper integration
Expand Down Expand Up @@ -216,6 +214,8 @@ pages:
path: /docs/infrastructure/host-integrations/host-integrations-list/nvml-integration
- title: NVIDIA Triton integration
path: /docs/infrastructure/host-integrations/host-integrations-list/nvidia-triton-integration
- title: OCSF Integration
path: /docs/infrastructure/host-integrations/host-integrations-list/ocsf-integration
- title: Openstack Controller integration
path: /docs/infrastructure/host-integrations/host-integrations-list/openstack-controller-integration
- title: Oracle Database integration
Expand Down
File renamed without changes.

0 comments on commit 3bf5d74

Please sign in to comment.