icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Luna HSM App for Splunk
SHA256 checksum (luna-hsm-app-for-splunk_200.tgz) a56b9b0174854e9d12518eaf7a48a74a13ca7039cd054af3d605061ebfb76446 SHA256 checksum (luna-hsm-app-for-splunk_110.tgz) 8f97c6b50191debaf59a54a2627898d2c8503f5093528c1c2778b9b72c35f0a2 SHA256 checksum (luna-hsm-app-for-splunk_101.tgz) 142c8b100714333e7bde2ff71e13769c9d8390c8984cb1c9e964deaa4d875c81
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Luna HSM App for Splunk

This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
Luna HSM App monitors Luna HSM appliances using syslog and SNMP poll requests, thereby enabling users to monitor the appliance's health status and availability.
Users can get analytics on any Luna HSM appliance that is configured with the Luna HSM App.

Luna HSM App for Splunk


Welcome to Luna HSM App; the application that monitors Luna HSM appliances using syslog and SNMP poll requests, thereby enabling users to monitor the appliance's health status and availability. Users can get analytics on any Luna HSM appliance that is configured with the Luna HSM App.

The following section details the prerequisites, and instructions on Luna HSM App download and deployment.


Installation Prerequisites

The following section lists the installation requirements for Luna HSM App:

  1. Download and install Splunk Enterprise Server. Luna HSM App is currently supported on the Splunk Enterprise over Linux RHEL 6.x and Cent OS platform.
  2. Ensure that the hostname of the Luna HSM appliances are different as they are used to differentiate between the appliance and their captured logs.
  3. Splunk SNMP modular input version 1.7.8 or above must be deployed on Splunk server.
    • Visit This Page to deploy Splunk SNMP Modular Input. You could also download it from the link here.
    • Perform the Splunk SNMP modular input setting configuration (refer deployment document of Splunk SNMP modular input plugin). Refer to the link here for its documentation and perform those steps carefully.
  4. Syslog and SNMP poll/trap must be configured on the Luna HSM Appliance.

    • To configure syslog on splunk server, run the command below on your Luna HSM appliance.

      syslog re add -h < Splunk_server_IP > -pr tcp -po 7171

      Note: Update < Splunk_server_IP > as the IP of your splunk machine.

    • To configure and enable SNMP traps/poll on Luna appliance, run the following set of steps. Each step corresponds to an administrative command via the Luna shell.

      • Add an SNMP user to the system using the command:
        sysconf snmp user add -s < Security_Username > -authPassword < PASSWORD > -authProtocol < Auth_protocol > -privPassword < PASSWORD > -privProtocol < Priviledge_protocol >
      • Enable SNMP using the command sysconf snmp enable.
      • Set the SNMP trap parameters for the user created in the preceding step using command sysconf snmp trap set.
      • Enable SNMP traps using command sysconf snmp trap enable

Assuming that you use Pete as the snmp user, here are the list of commands that you can copy-and-paste directly into a Lush session to configure and enable traps. Ensure that the IP address for sysconf snmp trap set matches the target < Splunk_server > for SNMP notifications. The examples in the application use 192.168.0.100.

  1. Add an SNMP user to the system using the command:
    sysconf snmp user add -s pete -authPa 87654321 -authPr SHA -privPa 12345678 -privPr AES
  2. Enable SNMP using the command sysconf snmp enable
  3. Set the SNMP trap parameters for the user created in the previous step:
    sysconf snmp trap set -h 192.168.0.100 -s pete -e 1234567890 -authpr SHA -authpw 87654321 -privPr AES -privPwd 12345678
  4. Enable SNMP traps using the command sysconf snmp trap enable

Post-Installation Requirements

Please make sure to configure the following settings on the Splunk web interface after you have downloaded and installed the Luna HSM App.

  1. Ensure to assign the can_delete role to the Splunk Admin User. This can be assigned on the splunk web interface in the Settings section under Access controls » Users.
  2. Make sure that you configure the Email settings to send alerts on sensitive operations to users. You can configure the same in the Settings section under Server settings » Email settings on the splunk web interface.

Luna HSM App - Download and Installation

This section details the instructions on downloading the Luna HSM App.

  1. Download the Luna HSM App application from the package provided at The Splunk App Page.

  2. Click the Download button available on the page.

  3. The luna-hsm-app-for-splunk_xxx.tgz file gets downloaded, after the license agreements are accepted.

  4. Login to the Splunk web interface, click on App -> Manage Apps to open the Apps Management page in Manager.

  5. Click the Install app from file button, locate the downloaded file (luna-hsm-app-for-splunk_xxx.tgz file) and click Upload.
  6. Restart the splunk server after the file upload. The application is deployed.
  7. Verify (if necessary) that the application is installed. It should be listed in the list of apps installed within the Manager and can be found on the server at
    https://splunkbase.splunk.com/app/2771/

Verification

The following points can be used to verify that the Luna HSM App application is installed properly.

  • A new application named Luna HSM App should be listed in the list of applications installed within the Manager.
  • New index named lunasa_appliance, hsm_operation, hsm_client_addr, hsm_partition_info and luna_syslog1 should have been created in the index list section.
  • New Fields extraction should be displayed in Splunk Setting->Fields->Fields extraction section for Luna HSM App.
  • New Alerts must be displayed in Setting-> search,reports and Alert section for Luna HSM App.
  • A TCP input type must be displayed in Setting->Data Inputs->TCP section. The TCP port should be 7171.

Online Demonstration

Click here to watch a video that demonstrates the installation steps to use Luna HSM App.


Adding Custom MIBs to Splunk Modular Input:

Before you begin to add custom MIBs to Splunk Modular Input, make sure that you have deployed the PyCrypto package. Refer to the section, “Building and Installing PyCrypto” available in SNMP Modular Input documentation at https://splunkbase.splunk.com/app/1537/#/documentation

For Luna HSM App, we require following custom MIBs in python(.py) format:

  • SAFENET-HSM-MIB
  • LM-SENSORS-MIB
  • CHRYSALIS-UTSP-MIB
  • SAFENET-APPLIANCE-MIB
  • SAFENET-GLOBAL-MIB
  • SNMPv2-SMI

Note: Thales provides these custom MIBs files in python (.py) as well as in the .txt format with this application.

  • You could either use the custom MIB python files (converted using Python 3.6.8 on our Linux (CentOS 7) system). Copy them from the location $SPLUNK_HOME$/etc/apps/deviceinformation/bin and paste them at $SPLUNK_HOME/etc/apps/snmp_ta/bin/mibs, or
  • Regenerate python files out of the custom MIB txt files using the build-pysnmp-mib method available with Splunk Modular Input (click the link here to refer to the process as defined under the section Adding Custom MIBs in Splunk Modular Input documentation).

More Information

For more information on how to use the Luna HSM App, refer to the Luna HSM App Installation and User Guide, available in the installed package under the \deviceinformation\static folder.


Release Notes

Version 2.0.0
Jan. 31, 2022

Thales Luna HSM App for Splunk is updated v2.0.0 (luna-hsm-app-for-splunk_200.tgz).

Supports Splunk Enterprise v8.x.x

Application Name - Thales Luna HSM App for Splunk
Release version - 2.0.0
Release Date - 31 January 2022

Version 1.1.0
Jan. 31, 2019

Splunk App for SafeNet Luna HSM is updated v1.1.0 (safenet-luna-hsm-app_110.tgz).

Application Name - Splunk App for SafeNet Luna HSM
Release version - 1.1.0
Release Date - 31 January 2019

Version 1.0.1
Aug. 10, 2015

Safenet Luna HSM App 1.0.1 Copyright (C) 2015-2016 Gemalto Inc.

About This Release: This is an alpha release of Luna HSM App; the application that monitors SafeNet's Luna HSM appliances using syslog and SNMP poll requests, thereby enabling users to monitor the appliance's health status and availability.

New Features in This Release

  • Configure Luna HSM with the application.
  • Efficiently monitor the health status and availability of Luna HSM appliances.
  • Collect and Monitor graphical and statistical information about Luna HSM utilization.
  • Configure User Alerts for sensors.
  • Monitor HSM Errors, Lush Command Frequency and NTLS Response Code.
  • Gather Partition Based Information on Luna HSM appliances.

For more information on how to use the Splunk application for Luna HSM, refer to the Luna HSM App Installation and User Guide, available in the installed package under the \deviceinformation\static folder.


Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.