Installing CA Enterprise Log Manager - CA Technologies

More documents

Recommendations

Info

Configuring the Event Log StoreNote: You must configure each pair of servers that participate in auto archivingfor non-interactive authentication for the auto archive configuration to operateproperly.The following table is an example. The collection CA Enterprise Log Managerserver is named CollSrvr-1. The reporting CA Enterprise Log Manager servernamed RptSrvr-1. For the example, there exists a remote storage server namedRemoteStore-1 to store cold database files, and that the cold files are located inthe directory, /CA-ELM_cold_storage.Event Log StorefieldCollection ServervaluesReporting Server valuesMaximum Rows 2000000 (default) Not applicable to auto archive.Max Archive Days1 (Not applicable to autoarchive.)30 (Applicable to auto archiveand when auto archive is notconfigured.)Archive Disk Space 10 10Export Policy 24 72Secure Service Port 17001 17001Auto Archive OptionsEnabled Yes YesBackup Type Incremental IncrementalFrequency Hourly DailyStart Time 0 23EEM UserEEM Password Remote Server RptSrvr-1 RemoteStore-1Remote User caelmservice user_XRemote Location /opt/CA/LogManager /CA-ELM_cold_storageRemote CA-ELM Server Yes NoThe auto archive options in this example move archive files (warm databasefiles) on the collection server to the reporting server every hour. This keeps diskspace available for incoming events. Both servers use an incremental backup toavoid having to move large volumes of data at any one time. After a warmdatabase is moved to the reporting server, it is automatically deleted from thecollection server.124 Implementation Guide
Configuring the Event Log StoreNote: The 0 value for the Start Time does not have any effect when the backupFrequency is set to Hourly.For EEM User and EEM Password, you specify the credentials of a CA EnterpriseLog Manager user assigned either the predefined role of Administrator or acustom role associated with a custom policy that grants the ability to perform theedit action on the database resource.For the reporting server, specify /opt/CA/LogManager for the Remote Locationand caelmservice as the Remote User if auto archiving from the reporting serverto the remote storage server. You create this path and this user when youconfigure non-interactive authentication between these servers.The auto archive options in this example move archive files on the reportingserver to the remote storage server daily starting at 11:00 pm. After a databaseis moved to cold storage on the remote server, it is retained on the reportingserver for Max Archive Days.If auto-archive is not enabled, warm databases are retained based on thresholdsconfigured for Max Archive Days and Archive Disk Space, whichever occurs first.Archived databases would be retained on the reporting server for 30 days beforebeing deleted unless the disk space drops below 10%. In that case, the reportingserver generates a self-monitoring event and deletes the oldest databases untilavailable disk space is above 10%. You can create an alert to notify you by emailor RSS feed when this occurs.When a database is restored from a remote storage server to its originalreporting server, it is kept for 3 days (72 hours).More information about each of these fields and their values is available in theonline help.Set Event Log Store OptionsThe Event Log Store configuration dialog allows you to set global options for allCA Enterprise Log Manager servers. You can also click the arrow next to the entryto expand the Event Log Store node. This action displays the individual CAEnterprise Log Manager servers in your network. Clicking on those server namesallows you to set local configuration options that are specific to each server, ifdesired.Users with the Administrator role can configure any CA Enterprise Log Managerserver from any other CA Enterprise Log Manager server.Chapter 5: Configuring Services 125
Page 1 and 2:
CA Enterprise Log ManagerImplementa
Page 4 and 5:
Contact CAContact Technical Support
Page 7 and 8:
ContentsChapter 1: Introduction 13A
Page 9 and 10:
Import CA Enterprise Log Manager Us
Page 11 and 12:
Access CA Enterprise Log Manager th
Page 13 and 14:
Chapter 1: IntroductionThis section
Page 15:
About This GuideNote: For details o
Page 18 and 19:
Server PlanningServer RolesA CA Ent
Page 20 and 21:
Server Planning■Restore point ser
Page 22 and 23:
Server PlanningThe next simplest ar
Page 24 and 25:
Log Collection PlanningLog Collecti
Page 26 and 27:
Log Collection PlanningAn automated
Page 28 and 29:
Federation PlanningLog Collection G
Page 30 and 31:
Federation Planning3. Decide which
Page 32 and 33:
Federation PlanningTo implement the
Page 34 and 35:
Federation PlanningAn example feder
Page 36 and 37:
User and Access PlanningUser Store
Page 38 and 39:
User and Access PlanningRequired in
Page 40 and 41:
User and Access PlanningThe default
Page 42 and 43:
Subscription Update Planning■Cont
Page 44 and 45:
Subscription Update PlanningPort 80
Page 46 and 47:
Subscription Update PlanningVerify
Page 48 and 49:
Subscription Update PlanningHow Sub
Page 50 and 51:
Subscription Update PlanningThe pro
Page 52 and 53:
Subscription Update PlanningExample
Page 54 and 55:
Agent PlanningAgent PlanningAgents
Page 61:
Agent PlanningFor smaller implement
Page 64 and 65:
Understanding the CA Enterprise Log
Page 66 and 67:
Installing a CA Enterprise Log Mana
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
Page 74 and 75: Installing a CA Enterprise Log Mana
Page 76 and 77: Initial CA Enterprise Log Manager S
Page 82 and 83: Install the ODBC ClientUsers of thi
Page 84 and 85: Install the ODBC ClientODBC Data So
Page 86 and 87: Installing the JDBC ClientTest Serv
Page 88 and 89: Installing the JDBC ClientInstall t
Page 90 and 91: Installation TroubleshootingProduct
Page 92 and 93: Installation TroubleshootingRegiste
Page 94 and 95: Installation TroubleshootingImport
Page 101 and 102: Chapter 4: Configuring Basic Users
Page 103 and 104: Configuring the User StoreMore info
Page 105 and 106: Configure Password PoliciesConfigur
Page 107 and 108: Create the First AdministratorCreat
Page 109: Create the First Administrator4. Se
Page 112 and 113: Edit Global ConfigurationsThe Syste
Page 114 and 115: Working with Global Filters and Set
Page 116 and 117: Configuring the Event Log StoreAbou
Page 118 and 119: Configuring the Event Log StoreAbou
Page 120 and 121: Configuring the Event Log StoreGene
Page 122 and 123: Configuring the Event Log StoreSet
Page 126 and 127: ODBC Server ConsiderationsTo set ev
Page 128 and 129: Configuring SubscriptionAction Aler
Page 130 and 131: Configuring Subscription2. Accept o
Page 132 and 133: Configuring Subscription11. If your
Page 134 and 135: Configuring SubscriptionRSS Feed UR
Page 136 and 137: Configuring SubscriptionMore inform
Page 138 and 139: Configuring SubscriptionConfigure a
Page 140 and 141: Using the Agent ExplorerYou base yo
Page 142 and 143: Configuring the Default AgentTo rev
Page 144 and 145: Example: Enable Direct Collection U
Page 154 and 155: View and Control Agent or Connector
Page 156 and 157: Hierarchical FederationsHierarchica
Page 158 and 159: Meshed FederationsIn a ring or star
Page 160 and 161: Configuring a CA Enterprise Log Man
Page 163 and 164: Chapter 8: Working with the EventRe
Page 165 and 166: Appendix A: Considerations for CA A
Page 167 and 168: Understanding Differences in Archit
Page 169 and 170: Understanding Differences in Archit
Page 171 and 172: Configuring CA AdaptersIn addition
Page 173 and 174: Configuring CA AdaptersConfigure th
Page 175 and 176:
Sending CA Audit Events to CA Enter
Page 177 and 178:
Sending CA Audit Events to CA Enter
Page 179 and 180:
When to Import Events4. Click Edit.
Page 181 and 182:
Importing Data from a SEOSDATA Tabl
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Integrating with CA Audit r8 SP2Imp
Page 189 and 190:
Integrating with CA Audit r8 SP22.
Page 191:
Integrating with CA Audit r8 SP2To
Page 194 and 195:
How to Modify CA Audit Policies to
Page 196 and 197:
Page 198 and 199:
Page 200 and 201:
Page 202 and 203:
Page 204 and 205:
How to Configure a CA Access Contro
Page 206 and 207:
How to Configure a CA Access Contro
Page 208 and 209:
How to Import CA Access Control Eve
Page 210 and 211:
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 219 and 220:
Appendix C: CA IT PAM Consideration
Page 221 and 222:
Prepare to Implement CA IT PAM Auth
Page 223 and 224:
Copy the Certificate to the CA IT P
Page 225 and 226:
Install the Third-Party Components
Page 227:
Launch and Log in to the CA IT PAM
Page 230 and 231:
About Backing Up the CA EEM ServerA
Page 232 and 233:
Back Up a CA Enterprise Log Manager
Page 234 and 235:
Replace a CA Enterprise Log Manager
Page 236 and 237:
Creating Virtual CA Enterprise Log
Page 238 and 239:
Page 240 and 241:
Page 242 and 243:
Page 244 and 245:
Page 246 and 247:
Page 248 and 249:
Page 250 and 251:
agent exploreragent groupagent mana
Page 252 and 253:
auto-archiveCA adaptersAuto-archive
Page 254 and 255:
CEG fieldscertificatescold database
Page 256 and 257:
defrosted database stateA defrosted
Page 258 and 259:
event log storageevent log storeeve
Page 260 and 261:
global groupglobal resourceglobal u
Page 262 and 263:
LMArchive utilityThe LMArchive util
Page 264 and 265:
message parsing token (ELM)A messag
Page 267 and 268:
emote storage serverA remote storag
Page 269 and 270:
servicesSNMPSNMP trap contentsThe C
Page 271 and 272:
summarization rulesSummarization ru
Page 273 and 274:
IndexAadministration tasksuser stor
Page 275:
description • 18in federated repo
show all

Installing CA Enterprise Log Manager - CA Technologies

Create successful ePaper yourself

Delete template?

Save as template?