Installing CA Enterprise Log Manager - CA Technologies

Chapter 7: Creating FederationsThis section contains the following topics:Queries and Reports in a Federated Environment (see page 155)Hierarchical Federations (see page 156)Meshed Federations (see page 157)Configuring a CA Enterprise Log Manager Federation (see page 159)Queries and Reports in a Federated EnvironmentA single CA Enterprise Log Manager server returns data from its internal eventdatabase to respond to queries and populate reports. If you have a federation ofCA Enterprise Log Manager servers, you can control how queries and reportsreturn event information in the way you configure your federation relationships.You can also maintain query results from single servers by disabling the UseFederated Queries global setting.By default the global setting, Use Federated Queries, is enabled. This causesqueries from a parent CA Enterprise Log Manager server to be sent to all child CAEnterprise Log Manager servers. Each child CA Enterprise Log Manager serverqueries the active event log store and the archive catalog as well as querying allof its child CA Enterprise Log Manager servers. Each child CA Enterprise LogManager server then creates a single results set to send to the requesting parentCA Enterprise Log Manager server. Protection against circular queries is built intoCA Enterprise Log Manager to enable meshed configurations.A typical enterprise CA Enterprise Log Manager implementation has from one tofive servers. A large enterprise implementation may have ten or more servers.The way you configure your federation controls how much information is visibleto the CA Enterprise Log Manager server that issues the query. The simplestquery type comes from the primary CA Enterprise Log Manager server andreturns information from all of the child servers configured under it.When you query the federation from a child server, the results you see depend onhow you have your federation configured. In a hierarchical federation, all of theservers that are configured as children under one server return query results toit. In a meshed federation, all of the interconnected servers return data to theserver that issues the query.Chapter 7: Creating Federations 155