Using filters and event notifications, CEF is capable of reporting when a specific type of event occurs, or when it does not occur. You can also filter events for one or more specific object classes or attributes, depending on the event type. CEF evaluates all the generated events against the configured filters on the OpenText eDirectory server and logs only the events matching to those filters.
This section provides the information you need to configure your system filters and notifications.
Click the Exclusion Filter link to configure filtering for those object classes and attributes for which you do not want an event to be generated. You can select object classes and attributes.
To configure filtering for unwanted OpenText eDirectory Events:
In OpenText Identity Console, select Auditing from the home page.
Select the NCP Server you want to monitor, and then click OK.
Now go to Advanced Settings and click Exclusion Filter under Filters.
The CEF Exclusion Filtering window appears.
In the Available Object Classes list, select object classes for which you do not want to collect events, then click the right arrow to move them to the Selected Object Classes list.
In the Available Attributes(s) list, select any number of attributes. Select the attribute and click the right arrow to add the attribute to the selected list of attributes.
Click Ok.
Using the configured filter, CEF audit module stops generating events for all the selected object classes and attributes.
You can configure filtering for Objects to look for only a specific event or events. For example, if you want to be notified when someone creates a user account in OpenText eDirectory, you can create a filter selecting the User Object class to log events for creating a new user object.
To configure accounts filtering, click the Object Events link, select the class, and then click OK to exit the application.
To configure filters for Account Management events:
In OpenText Identity Console, select Auditing from the home page.
Select the NCP Server you want to monitor, and then click OK.
Now go to Advanced Settings and click Object Events under Filters.
The CEF Object Filtering window appears.
In the Available Object Classes list, select any object class, then click the right arrow to move the object class to the Selected Object Classes list, and then click OK.
Using the configured filter, CEF audit module checks all generated events for the selected object classes and logs those events.
Click the Attribute Events link to configure filtering for the Attribute Events. For example, if you want to be notified when someone adds a new attribute value in OpenText eDirectory, you can create a filter to log events for adding a new value.
To configure filtering for Attribute Events:
In OpenText Identity Console, select Auditing from the home page.
Select the NCP Server you want to monitor, and then click OK.
Now go to Advanced Settings and click Attribute Events under Filters.
The Attributes Configuration Filtering window appears.
In the Available Object Classes list, select object classes for which you want to collect events, then click the right arrow to move them to the Selected Object Classes list.
In the Available Attributes(s) list, select any number of attributes for the selected object classes. Select the attribute and click the right arrow to add the attribute to the selected list of attributes.
NOTE:If you select an object class, then all the Attribute Events for all attributes on that object class are selected. In this case, you will get all the Attribute Events for the all attributes on the selected object classes.
Click OK.
With the filter configured, CEF audit module checks the generated events for all the selected object classes and attributes and logs those events.