Installing CA Enterprise Log Manager - CA Technologies

Sending CA Audit Events to CA Enterprise Log ManagerTo modify an existing policy rule's action to send events to CAEnterprise Log Manager1. Log into the Policy Manager server and access the My Policies tab in the leftpane.2. Expand the policy folder until you can see the desired policy.3. Click the policy to display its basic information in the Details pane to theright.4. Click Edit in the Details pane to add to the policy's rules. The rule wizardstarts.5. Click the Edit Actions next to the arrow for the wizard's step 3. The wizard'srule actions page displays.6. Click the Collector action in the Browse Actions pane on the left. This displaysthe Action List to the right.You can also use the Route action to create a rule to send events to a CAEnterprise Log Manager server.7. Click New to add a new rule.8. Enter the IP address or host name of the collection CA Enterprise LogManager server.For a CA Enterprise Log Manager implementations with two or more servers,you can enter a different CA Enterprise Log Manager host name or IP addressin the Alternate Host Name field to take advantage of 's automaticfailover feature. If the first CA Enterprise Log Manager server is not available,CA Audit automatically sends events to the server named in the AlternateHost Name field.9. Enter the name of the management CA Enterprise Log Manager server in theAlternate Host Name field, and then create a description for this new ruleaction.10. Clear the check box, Perform this action on remote server, if it is checked.11. Click Add to save the new rule action and then click Finish in the wizardwindow.12. Select the Rules tab in the lower right pane, and then select a rule to check.13. Click Check Policies to check the changed rule with the new actions to ensurethat it compiles properly.Make any needed modifications to the rule and ensure that it compilescorrectly before you activate it.14. Click Activate to distribute the checked policy that contains the new ruleactions you added.15. Repeat this procedure for each rule and policy with collected events you wantto send to CA Enterprise Log Manager.Appendix A: Considerations for CA Audit Users 177