Installing CA Enterprise Log Manager - CA Technologies

How to Modify CA Audit Policies to Send Events to CA Enterprise Log Manager4. Select the EnableListener check box and set the SapiPort value to a valuethat matches what CA Audit uses.The default CA Enterprise Log Manager value, 0, uses the Portmapper serviceto map the ports. If you have a port defined in CA Audit, use that settinghere.5. Accept the other field defaults, and scroll down to the list of Mapping Files.If you select the Register check box, specify a SAPI port value.6. Add the Access Control mapping file entry if it is not present, and remove theother mapping file selections from the list of Selected mapping files.7. Click Save.Modify an Existing CA Audit Policy to Send Events to CA Enterprise Log ManagerUse this procedure to enable a CA Audit client to send events to both CAEnterprise Log Manager and the CA Audit collector database. By adding a newtarget to the Route or Collector actions on an existing rule, you can sendcollected events to both systems. As an alternative, you can also modify specificpolicies or rules to send events only to the CA Enterprise Log Manager server.CA Enterprise Log Manager collects events from CA Audit clients using the CAAudit SAPI Router and CA Audit SAPI Collector listeners. (CA Enterprise LogManager can also collect events using the iTech plugin directly, if you configuredany iRecorders to send directly to the CA Enterprise Log Manager server.)Collected events are stored in the CA Enterprise Log Manager event log storeonly after you push the policy to the clients and it becomes active.Appendix B: Considerations for CA Access Control Users 197