Enterasys Security Information and Event Manager, Configuration Manual

Page: 373 / 426

Configuring DSMs
Symantec System Center 357
NOTE
Selecting a value for the Credibility parameter greater than 5 will weight your
Symantec System Center log source with a higher importance compared to other
log sources in SIEM.
Step 9
Click Save .
Select List Type * for all fields from the table or view.
You may use a comma separated list to define specific tables or
views, if required for your configuration. The comma separated list
can be up to 255 alphanumeric characters in length. Also, the list
may include the following special characters: dollar sign ($),
number sign (#), underscore (_), en dash (-), and period(.).
Compare Field Type idx as the compare field. The compare field is used to
identify new events added between queries to the table.
Start Date and
Time Optional. Type the start date and time for database polling.
The Start Date and Time parameter must be formatted as
yyyy-MM-dd HH:mm with HH specified using a 24 hour clock. If the
start date or time is clear, polling begins immediately and repeats
at the specified polling interval.
Use Prepared
Statements Select the check box to use prepared statements.
Prepared statements allows the JDBC protocol source to setup the
SQL statement once, and then execute the SQL statement many
times with different parameters. For security and performance
reasons, we recommend that you use prepared statements.
Clearing this check box requires you to use an alternative method
of querying that does not use pre-compiled statements.
Polling Interval Type the polling interval, which is the amount of time between
queries to the event table. The default polling interval is 10
seconds.
You may define a longer polling interval by appending H for hours
or M for minutes to the numeric value. The maximum polling
interval is 1 week in any time format. Numeric values entered
without an H or M poll in seconds.
EPS Throttle Type the number of Event Per Second (EPS) that you do not want
this protocol to exceed. The default value is 20000 EPS.
Use Named Pipe
Communication Clear the Use Named Pipe Communications check box.
When using a Named Pipe connection, the username and
password must be the appropriate Windows authentication
username and password and not the database username and
password. Also, you must use the default Named Pipe.
Database
Cluster Name If you select the Use Named Pipe Communication check box, the
Database Cluster Name parameter is displayed. If you are running
your SQL server in a cluster environment, define the cluster name
to ensure Named Pipe communication functions properly.
Table 68-3 Symantec System Center JDBC Parameters (continued)
Parameter Description