1.4 Considerations for Migrating to CEF

To begin with the migration, you must first review the following considerations:

  • Your current Identity Manager version.

  • Your existing auditing configuration, that is, whether auditing is enabled or disabled.

NOTE:Auditing with NAudit and XDAS is discontinued from Identity Manager 4.8 release. If your auditing format type is not configured as CEF, then you may lose the audit events during migration to CEF format in Identity Manager 4.8.

The following table provides procedures to help you with the migration to CEF format. Select the procedure from this list depending on your current Identity Manager version and the existing auditing configuration.

Current Identity Manager Version

Existing Auditing Configuration

Required Action

Pre-Upgrade Steps

Upgraded Version

Post-Upgrade Steps

4.6.x, where x is 0 to 4

NA

None

Upgrade Identity Manager to 4.8.

  1. Install and configure the NetIQ Sentinel Universal CEF Collector. For more information, see Installing and Configuring the Universal CEF Collector.

  2. Configure Identity Manager components to use Common Event Format (CEF). For more information, see Configuring Identity Manager Components to Log Audit Events in CEF Format.

4.7.x, where x is 0 to 4

If CEF auditing is disabled.

None

Upgrade Identity Manager to 4.8.

  1. Install and configure the NetIQ Sentinel Universal CEF Collector. For more information, see Installing and Configuring the Universal CEF Collector.

  2. Configure Identity Manager components to use Common Event Format (CEF). For more information, see Configuring Identity Manager Components to Log Audit Events in CEF Format.

4.7.x, where x is 0 and 1

If CEF auditing is enabled.

Install and configure the NetIQ Sentinel Universal CEF Collector. For more information, see Installing and Configuring the Universal CEF Collector.

Upgrade Identity Manager to 4.8.

Configure Identity Applications to use Common Event Format (CEF). For more information, see Configuring Identity Applications.

4.7.x, where x is 2 and above

If CEF auditing is enabled.

None

Upgrade Identity Manager to 4.8.

Configure Identity Applications to use Common Event Format (CEF). For more information, see Configuring Identity Applications.

4.8

Identity Manager is freshly installed.

None

Upgrade Identity Manager to 4.8.

Install and configure Sentinel with Identity Manager. For more information, see Section 2.0, Configuring NetIQ Sentinel with Identity Manager.