Installing CA Enterprise Log Manager - CA Technologies

event_categoryevent_classeventsfederation serversfilterfolderfunction mappingsglobal configurationglobal filterThe event_category is the second-level event-specific field in eventnormalization used by the CEG. It provides a further classification of events witha specific ideal_model. Event category types include Operational Security,Identity Management, Configuration Management, Resource Access, and SystemAccess.The event_class is the third-level event-specific field in event normalization usedby the CEG. It provides a further classification of events within a specificevent_category.Events in CA Enterprise Log Manager are the log records generated by eachspecified event source.Federation servers are CA Enterprise Log Manager servers connected to oneanother in a network for the purpose of distributing the collection of log data butaggregating the collected data for reporting. Federation servers can beconnected in a hierarchical or meshed topology. Reports of federated datainclude that from the target server as well as that from children or peers of thatserver, if any.A filter is a means by which you can restrict an event log store query.A folder is a directory path location that CA Enterprise Log Manager managementserver uses to store the CA Enterprise Log Manager object types. You referencefolders in scoping policies to grant or deny users the right to access a specifiedobject type.Function mappings are an optional part of a Data Mapping file for a productintegration. A function mapping is used to populate a CEG field when the neededvalue cannot be retrieved directly from the source event. All function mappingsconsist of a CEG field name, a pre-defined or class field value and the functionused to obtain or calculate the value.The global configuration is a series of settings that apply to all CA Enterprise LogManager servers that use the same management server.A global filter is a set of criteria you can specify that limits what is presented in allreports. For example, a global filter of the last 7 days reports events generated inthe last seven days.Glossary 259