9.3 Configuring XDAS Audit for iManager

Table 9-2 lists the default location of the xdasconfig.properties file in different operating systems. You can customize the file according to your requirements.

Table 9-2 Location of the XDAS Configuration File

Operating System

File

Linux

/var/opt/novell/iManager/nps/WEB-INF/imanager_logging.xml

Windows

c:\Program Files\Novell\Tomcat\webapps\nps\WEB-INF\imanager_logging.xml

Linux and Windows Workstation

<unzipped workstation folder>\imanager\tomcat\webapps\nps\WEB-INF\imanager_logging.xml

Table 9-3 lists the XDAS configuration files.

Table 9-3 XDAS Configuration File

Options

Name

Syslog Appender

syslog

Rolling File Appender

file_appender

The following table provides an explanation of each setting in the imanager_logging.xml file.

Table 9-4 Syslog Settings

Setting

Description

syslogHost

IP address of the host in which the Audit server is running.

syslogProtocol

The protocol that must be used for communication (UDP/TCP/SSL).

syslogSslKeystoreFile

Location of the key store file.(Used only for SSL).

syslogSslKeystorePassword

Password for the keystore file.(Used only for SSL).

Threshold

Specifies the minimum log level allowed in the Syslog appender. Currently, INFO log level is supported.

Facility=USER

Specifies the type of facility. The facility is used to try to classify the message.Currently, USER facility is supported. These values may be specified as upper or lower case characters.

Layout

Layout setting for Syslog appender.

Table 9-5 File Appender Settings

Setting

Description

File= ${catalina.home}/logs/imanager.log

The default location of the log file for a File appender

MaxFileSize=10MB

The maximum size, in MBs, of the log file for a File appender. Set this value to the maximum size that the client allows.

MaxBackupIndex=10

Specifies the maximum number of backup files for a File appender. The maximum number of the backup files can be 10. If the value of MaxBackupIndex is set to 0, no backup file will be created.

layout class=org.apache.log4j.PatternLayout

Layout setting for File appender.

ConversionPattern="%t %d %-5p [%c:%M] %m%n”

Layout setting for File appender.

For information about the conversion patters and their descriptions, see logging.apache.org.

To enable the Syslog appender, make the following changes in the imanager_logging.xml file:

  1. Edit the following entries:

    <param name="Facility" value="user"/>
    <param name="syslogHost" value=" 192.168.1.5:1468 "/
    <param name="syslogProtocol" value="tcp"/>
    <param name="syslogSslKeystoreFile" value="/root/Desktop/sentinel/mykeystore.jks"/>
    param name="syslogSslKeystorePassword" value="novell"/>
    <param name="Threshold" value="INFO"/>
  2. Log into iManager and change the log events.

To enable the File appender, make the following changes in the imanager_logging.xml file:

  1. Edit the following entries:

    <param name="File" value="${catalina.home}/logs/imanager.log"/>
    <param name="Append" value="true" />
    <param name="MaxFileSize" value="10MB" />
    <param name="MaxBackupIndex" value="10" />

    You can customize the File value in either of the following platforms:

    Linux: /home/imanager.log

    Windows: C:\\<directory>\\imanager.log

  2. Select the desired event from iManager and save changes.

NOTE:The Failed SSL connection XDAS event is logged multiple times because internally several attempts are made to establish an LDAP connection.