To come back around to the initial question, I'll throw GLPI + FusionInventory into the mix as a decent replacement for SpiceWorks. You keep the ability to have your whole IT environment managed and documented in a single system (Equipment, users, ticketing, contracts, contacts etc etc....)
So the laptop is my main driver and runs the 3 displays + it's own.
The lower display to the right is for a workstation that's used for building / maintaining our windows 10 deployment images as well as a GNS3 install that I need to find the time to use to mock-up our WAN / VPN topology.
The fireplace on the arm is a drastically underpowered 20" inspiron all in one touchscreen that had been doing nothing for years so I've taken it, put linux on it and it's just a toy / conversation piece.
EDIT: fireplace has now become an ASCII aquarium
I searched really quickly and didn't find a section or category where folks have been posting useful how-to guides or articles for the community. There are a couple of things that I've worked through lately that could probably be useful to others, just don't know exactly where to stash it on here. As an example, how to make a uefi bootable USB to automatically apply BIOS settings for Dell. In all honesty, my motivation here is as much to share with the community as have stuff like this publicly documented so I can find it if I need to re-do or update it for my own needs.
@valentina said in What did you have for lunch or dinner today?:
I ate 2 boneless bbq wings
Isn't that just marketing chicken fingers to adults? :face_with_stuck-out_tongue:
@mr-jones knowbe4. They provide training modules for users as well as allow you to run simulated phishing exercises. There are other companies out there that provide the same service(s) but we're using these guys for now.
Good afternoon from Eastern Canada! I'm part of the IT team for a manufacturing company with offices throughout Canada and the Eastern US. Cheers!
It feels like the OP thinks that this is a seller's forum as opposed to a group of IT professionals looking to help each other out. Or just trolling to waste time. Or a college kid who was given an assignment and is looking for us to provide the answer.
Trying out Fedora on my personal laptop and watching season 3 of the grand tour
@DustinB3403 said in Bad one: SonicWALL Remote Management Vulnerability:
@wrx7m said in Bad one: SonicWALL Remote Management Vulnerability:
WTF? People NAT their iDracs?
Some people...
Probably the same people that put ketchup on a perfectly good steak..... psychopaths the whole lot of them
@scottalanmiller said in Deploying firmware updates on servers and testing...:
@jimmy9008 said in Deploying firmware updates on servers and testing...:
My thoughts are that we cannot know if a server will develop an issue from a patch before doing the patch. But, they want a plan to know which to avoid.
You are correct. Unless you can identify what caused the issue you don't have anything to go on. How will you identify the issue unless you risk several more machines... probably more machines that you have in your total fleet?
Ask them how they expect you to determine something of this nature? If they aren't providing you with the proper testing equipment and timeline (which would be insane, this could easily cost hundreds of thousands of dollars) where do they expect you to produce this information from? You don't even know what you are looking for. Even if you get lucky and guess what it is, it's just a guess and you have no confidence in predicting if it will work or not.
Yeah, this sounds like a case of the bean-counters having unreasonable expectations. Best you can do is keep track of issues to identify machines that might be more problematic than others. Concrete example from my env is that we have a couple of machines that we know will fail to reboot cleanly about 40% of the time.... Have to pull power completely and then they'll boot.... (R730 or R730xd), apparently it's a not uncommon issue with that gen of Dell servers and the only fix is to swap the whole main-board. In my case they're up for replacement and out of warranty so we just make sure that someone's on-site when/if they need to be rebooted for updates / maintenance etc
@scottalanmiller said in Wazuh Setup:
ElasticSearch is no longer open. I won't touch them. Look at OpenSearch now instead.
Looks like they're already using elasticsearch-oss and opendistroforelasticsearch instead of the closed source stuff. https://documentation.wazuh.com/current/installation-guide/open-distro/distributed-deployment/step-by-step-installation/elasticsearch-cluster/elasticsearch-single-node-cluster.html#elasticsearch-single-node-cluster
Followed the step by step instructions and it worked like a charm.... only problems I ran into was in the elasticsearch tuning section. curl didn't want to work correctly with http so had to use https with the -k switch to deal with the self-signed certs.
For hardware / chassis management Dell's openmanage enterprise is pretty useful. I'd suggest giving it a look if you've got a big Dell footprint to look after. Should be available for download when you check for downloads with any recent service tag. If you can't find it let me know and I'll see if I can find a direct link.
Trying to use the docs here : https://documentation.wazuh.com/current/installation-guide/open-distro/distributed-deployment/unattended/index.html
Just trying to roll out a 2 server setup (one manager, one elasticstack / kibana) and it doesn't get past the "Initializing Kibana" step, it just appears to stick in a loop or something with as many lines of progress dots in the console as I'll let run.....
I'm planning on using x.x.x.140 for the manager and x.x.x.141 for the elasticstack server.
In the config I'm using the 141 IP for <elasticsearch_ip> and <kibana_ip>, 140 for the <wazuh_master_server_IP>
When running
bash ~/elastic-stack-installation.sh -k -n <node_name>
I'm using the server's hostname as <node_name>
The instructions specify that node_name should be the same as used in the config.yml, but I don't have any references to that in the config.yml....
At this point I'm either missing something or losing my mind.... well honestly the options aren't mutually exclusive, but any info or help would be appreciated.
Just wondering if there are any FML users on here and if so, has anyone tried the 7.0 release yet?
Conventional wisdom with Forti-stuff is to wait out the first 3 or 4 patch releases before moving to production but 7.0 fixes a huge security blind-spot. https://www.reddit.com/r/fortinet/comments/ce0vm2/fortimail_skips_sfp_validation_for_safelisted/
I haven't played with the signage mode but we've used it for kiosks with varying degrees of success.
@pete-s said in Bring order into IT environment in chaos:
@notverypunny @black3dynamite @gjacobse @EddieJennings
Thanks guys!
Are there any cloud software suitable to make the customer inventory/documentation in that would fit SMB price range?
It doesn't make sense for the customer to pay for a full fledged asset management solution with ticketing and every other possible module. But it makes sense to have the documentation in some central location.
Depends of course on your price range. Teclib does hosted glpi https://www.glpi-network.cloud/ pricing shows as 19 euro / tech / mth. Unless I missed something snipe is all manual entry whereas glpi does agent-based automatic inventory. Also has a KB, ticketing and financials baked in. GLPI stands for Gestionnaire Libre de Parc Informatique (roughly translated: Free Data Centre Manager). You could also run it on-prem, just requires a basic LAMP setup.
@pete-s said in Bring order into IT environment in chaos:
Faced with an working IT environment in chaos (undocumented, unpatched, where's the backups, what licenses are there, what warranties, vendors, what servers are in use, what apps etc, etc).
What steps would you take to get things in order as quickly as possible?
And in what order would you do it?
1- Figure out what your current state is
2- Establish priorities with the stakeholders, depending on what your inventory / audit finds.