Sending LiveAssurance Alerts to LiveNX - BlueCat Infrastructure Assurance

(LiveNX Freemium Offer) LiveAssurance - Network Security Quick Start Guide
ft:locale
en-US
Product name
BlueCat Infrastructure Assurance
Configure an integration with LiveNX by using the LiveAssurance UI to enable the storage of alerts (generated in LiveAssurance) in the LiveNX database.
Note: In addition to storing alert data in the LiveNX database, the data is also preserved in the file /usr/share/indeni-services/config/livenx.env. When the LiveNX integration is deleted, this file will also be deleted.

Prerequisites

  • Before you configure the integration, ensure that you've set a token for LiveAction Receiver in the Network Configuration page of the LiveNX UI.

  • Note:

    Starting in v25.3.0, LiveAssurance uses gRPC as the transport protocol for the openTelemetry exporter instead of HTTP to forward alerts to LiveNX.

    • Due to this change, LiveAssurance v25.3.0 must be integrated with only LiveNX v25.3.0 (or greater). Integrating LiveAssurance v25.3.0 with a LiveNX version earlier than 25.3.0, and vice versa, will fail.
    • You must ensure that LiveAssurance can reach LiveNX via port 4317 (that is, the port used for gRPC).
Use the following procedure to set this token in the LiveNX UI:

  1. Log in to the LiveNX web interface.

  2. Select the gear icon available in the Navigation bar.

  3. Select Network Intelligence Configuration > Network Configuration in the sidebar.

  4. In the Network Configuration page that is displayed, configure the following parameters:
    • LiveNX REST API Token—You can obtain this token from the LiveNX Swagger page (<LiveNX-URL>:8093/v1/docs).
    • LiveAction Receiver Configuration—Enable this option.
    • Token—If not present already, create a token for the LiveAction Receiver Configuration. You can enter any value manually. Alternatively, you can automatically generate a UUID by re-saving the configuration. (TIP: Temporarily modify a field and select Save.)
      Note: Greenfield deployments will always have a UUID pre-populated.

  5. Make a note of this token as you will use it when configuring the LiveNX integration in the LiveAssurance UI.

  6. Select Save.

Procedure to send LiveAssurance alerts to LiveNX

  1. Open <LiveNX-URL>:5443 in a browser (both http and https are supported).

  2. Select Settings in the sidebar, then select Integrations.

  3. From the Add New Integration drop-down list, select LiveNX.

  4. Configure the following parameters:

    • Integration Name—enter a name for the LiveNX integration.
    • IP—enter the IP address of the LiveNX server.
    • Token—enter the LiveAction Receiver token that grants authorized access to send alerts to LiveNX. This is the same token that is configured in the Network Configuration page of the LiveNX UI.

  5. Select Save.

  6. For the integration to start, you must restart the authserver by using the following command:

    cd /data/bcia && docker compose restart authserver

After successful integration, the LiveAssurance alerts are displayed in your LiveAssurance Events dashboard within LiveNX. Clicking an alert will take you to the Issues tab in the LiveAssurance UI, which displays a detailed view of the alert.