54
Sentinel Log Manager 1.0.0.4 Administration Guide
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
4
In the
Audit Server
section, to start or stop the data collection for the audit server, select the
On
and
Off
options.
5
In the Audit Server section, specify the port on which the Sentinel Log Manager server listens
to messages from the event sources.
For more information about setting the port, see
“Port Configuration and Port Forwarding for
the Audit Server” on page 55
.
6
Set the appropriate client authentication and server key pairs settings.
For more information about client authentication, see
“Client Authentication for the Audit
Server” on page 55
.
7
Select the Sentinel Log Manager server behavior when the number of events received exceeds
the buffer capacity.
Temporarily pause connections:
Drops the existing connections and stops accepting new
connections until the buffer has space for the new messages. In the meantime, messages are
cached by the event sources.
Drop oldest messages:
Drops the oldest messages to accept new messages.
WARNING:
There is no supported method for recovering dropped messages, if you select
Drop oldest messages
.
8
Select
Idle Connection
to disconnect event sources that have not sent data for a certain period
of time.
The event source connections are automatically re-created when they start sending data again.
9
Specify the number of minutes before an idle connection is disconnected.
10
Select
Event Signatures
to receive a signature with the event.
To receive a signature, the Platform Agent on the event source must be configured properly.
11
Click
Reset
to change the specified settings to previous settings before saving it
12
Click
Save
to save the new settings.
The
Save
button is disabled until a valid port is specified for the server.
These settings might affect data collection for several servers (for example, multiple eDirectory
TM
instances). However, they do not start or stop services on the event source machines.
Changes on this page take effect immediately.
To view the health of audit server and its event sources, see
Section 4.4, “Managing Event Sources,”
on page 60
.
4.2.2 Setting the Audit Server Options
Administrators can change the settings about how Sentinel Log Manager listens for data from the
event source applications, set the port on which Sentinel Log Manager listens and the type of
authentication between the event source and the Sentinel Log Manager.
“Port Configuration and Port Forwarding for the Audit Server” on page 55
“Client Authentication for the Audit Server” on page 55
Содержание SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010
Страница 4: ...4 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 46: ...46 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 74: ...74 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 140: ...140 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 146: ...146 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 148: ...148 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 158: ...158 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 166: ...166 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
Страница 168: ...168 Sentinel Log Manager 1 0 0 4 Administration Guide novdocx en 19 February 2010 ...
