Installing CA Enterprise Log Manager - CA Technologies

Server Planning■Collection serverIn a single-server system, the management server performs the role of acollection server. In a system of two or more servers, consider a dedicatedcollection server. A collection server performs these functions:– Supports the configuration of connectors.– Accepts incoming event logs from connectors on its agents.– Refines incoming event logs, which involves parsing each message andmapping its data into the CEG format that allows uniform presentation ofevent data from disparate event sources.– Inserts event logs into the hot database and compresses the hotdatabase when it reaches the configured size into a warm database.– Auto-archives the warm database to the related reporting server on theconfigured schedule.Consider the event volume generated by your event sources whendetermining whether to dedicate servers to event collection and refinement.Also consider how many collection servers are to auto-archive their data to asingle reporting server.■Reporting serverIn a single-server or two-server system, the management server performsthe role of a reporting server. In a system with many servers, considerdedicating one or more servers to reporting. A reporting server performsthese functions:– If auto-archiving is configured, receives new databases of refined eventsfrom its collection servers.– Processes on-demand prompts, queries, and reports.– Processes scheduled alerts and reports.– Supports wizards for creating custom queries and reports.– If auto-archiving is configured, sends old databases to a remote storageserver.If you plan to generate many complex reports and alerts on a server withhigh on-demand activity, consider dedicating a server to reporting.Chapter 2: Planning Your Environment 19