Editing Category:INFOSYS DGRAM ELK (section)

==Training on INFOSYS DGRAM ELK  KT Part 1. Dated 05 June 2026 - Tetra Support Staff - Prashant==

{{#ev:youtube|FEWP2legaa0|640}}

'''Video summary:''' Part 1 of the INFOSYS DGRAM ELK KT (see Part 2, 6IrkurBVESg, for the deeper data-flow explanation). Gives the fuller device-coverage picture for the 19-node observability cluster: roughly 400-900 monitored assets spanning Linux/Windows servers, network devices (Juniper routers, Aruba switches), storage arrays (NetApp done via SNMP; a Pure Storage array not yet integrated because the vendor declined to cooperate), and a range of security devices -- Fortinet sandbox, web proxy, DLP, and F5 load balancers, only partially onboarded because the client's security team hasn't enabled SNMP access on some of them yet. Explains the two integration patterns used: for devices Elastic has an official "out-of-the-box" integration for (e.g. Palo Alto next-gen firewalls), logs flow in with minimal setup once Elastic Agent is pointed at them; for devices that can't be integrated directly (older network/security gear), an intermediate collector server receives the device's SNMP/syslog output and runs Elastic Agent itself to forward that on into the cluster.