Change Guardian User Guide
- Change Guardian User Guide
- Getting Started
- What is Change Guardian?
- Introduction to the Change Guardian Interface
- Understanding Change Guardian Components
- Interoperability of Directory and Resource Administrator With Change Guardian For Privileged Monitoring
- Default Ports
- Implementation Checklist
- Meeting System Requirements
- Understanding License Information
- Evaluation Licenses
- Enterprise Licenses
- Adding a License Key
- Security Considerations
- Basic Security Considerations
- Network Communication Options
- Post-Upgrade Configuration to Ensure Enhanced Keystore Security
- Applying Updates for Security Vulnerabilities in Embedded Third-Party Products
- Installing the Change Guardian Server
- Planning for Change Guardian Server Installation
- Traditional Change Guardian Server Installation
- Appliance Change Guardian Server Installation
- Installing the Change Guardian Components
- Installing the Policy Editor
- Installing Windows Agents
- Installing Security Agent for UNIX
- Configuring Agents to Monitor Azure AD and NetApp Storage
- Managing Change Guardian Modules and Licenses
- Upgrading Change Guardian
- Change Guardian Upgrade Checklist
- Upgrading Change Guardian Traditional Installation
- Upgrading Change Guardian Appliance from 5.0 to 5.1
- Upgrading to Change Guardian Appliance 5.1.1 and Later
- Applying Appliance Updates
- Upgrading Policy Editor
- Upgrading Windows Agent
- Setting Up Your Environment for Monitoring
- Understanding Policies
- Understanding Policy Sets
- Understanding Event Destinations
- Understanding LDAP Settings
- Understanding and Managing Asset Groups
- Assigning Policies and Policy Sets
- Understanding Monitoring Schedules
- Understanding Change Guardian Email Alerts
- Using Change Guardian Administrative Reports
- Monitoring Azure Active Directory
- Monitoring NetApp Storage
- Configuring Your Active Directory Environment
- Viewing Change Guardian Events
- Supported Web Browsers and Settings
- Understanding Event Information
- Viewing Detailed Event Information
- People
- Tags
- Filters
- Assigning Email Alerts to Events
- Forwarding Events for Long-Term Retention
- Configuring Event Routing Rules
- Creating an Event Routing Rule
- Ordering Event Routing Rules
- Activating or Deactivating an Event Routing Rule
- Configuring Roles and Users
- Overview
- Creating Roles
- Configuring Password Complexity
- Creating Users
- Leveraging Identity Information
- Overview
- Integrating Change Guardian with AD or IDM
- Searching and Viewing User Identities
- Reporting
- Creating Reports
- Scheduling Reports
- Working with Reports
- Rebranding Reports
- Configuring Tags
- Overview
- The Tags Interface
- Creating a Tag
- Managing Tags
- Performing Text Searches for Tags
- Deleting Tags
- Associating Tags with Objects
- Viewing Tagged Events
- Searching Events
- Searching Events Indexed in Traditional Storage
- Configuring Filters
- Creating Filters
- Sample Filters
- Viewing Events by Using Filters
- Managing Filters
- LDAP Authentication
- Overview
- Setting Up LDAP Authentication
- Logging in by Using LDAP User Credentials
- Understanding Alerts
- Overview
- Managing Alert Rules
- Managing Alerts
- Visualizing and Analyzing Alerts
- Viewing and Triaging Alerts
- Creating an Alert View
- Analyzing Alert Dashboards
- Troubleshooting
- Understanding Agent Manager
- Understanding Asset Groups
- Backing Up and Restoring Data
- Parameters for the Backup and Restore Utility Script
- Running the Backup and Restore Utility Script
- Restoring Data
- Configuring Data Federation
- Overview
- Configuring Servers for Data Federation
- Configuring Data Federation in FIPS 140-2 Mode
- Searching for Events
- Managing the Data Federation Search Results
- Viewing the Search Activities
- Running Reports
- Viewing Alerts
- Editing the Data Source Server Details
- Troubleshooting
- Uninstalling Change Guardian
- Change Guardian Uninstallation Checklist
- Uninstalling Windows Agent
- Uninstalling the Security Agent for UNIX
- Uninstalling Policy Editor
- Uninstalling the Change Guardian Server
- Post-Uninstallation Tasks
- Troubleshooting
- Failed Installation Because of an Incorrect Network Configuration
- Change Guardian Main Interface is Blank in Internet Explorer After Logging in
- Windows Agent Installation Using Change Guardian Agent Manager Fails
- Exception in the Change Guardian Logs When You Upgrade Change Guardian Versions from 4.2 or later to 5.0
- Asset Monitoring Failure Reports Are Not Captured for All Event Types
- Azure AD Monitoring Events Are Not Captured for All Event And Attribute Types
- Manual Configuration Required to Use Registry Browser
- Agent Manager and JAVOS services fail to start after installation of Change Guardian appliance
- Search Query Syntax
- Basic Search Query
- Wildcards in Search Queries
- The notnull Query
- Tags in Search Queries
- Regular Expression Queries
- Range Queries
- IP Addresses Query
- Change Guardian 5.1 Appliance on Hyper-V
- Legal Notice