Installing CA Enterprise Log Manager - CA Technologies

Log Collection PlanningThe following illustration shows a simple example of this kind of federated CAEnterprise Log Manager network. Two CA Enterprise Log Manager servers, onefor reporting and one for collection, handle event traffic from a variety of eventsources. Both servers can share data between them for queries, reporting, andalerting.The collection server primarily handles the incoming event log traffic and focuseson database inserts. It uses a short data retention policy of 24 hours or less. Anautomated script moves stored event logs to a reporting server daily or moreoften depending on event volume. Federation and the use of federated queriesbetween the two servers ensures that you receive accurate reports from theevent logs on both servers.The reporting server performs several functions:■■■■Processes queries and reportsSchedules and manages alertsMoves archived files to a remote storage serverProvides failover collection of connector-gathered events for the collectionserverChapter 2: Planning Your Environment 25