To configure EAS to receive events:

1. Disable history in the shell in order to avoid retention in the shell history of the password specified on the command line.

2. Unzip eas_link_configure.zip.

3. Change directory to the unzipped utility.

4. Modify db_connnection.properties to reflect values for your EAS PostgreSQL database:

   • server=PostgreSQL

   • hostname=localhost

   • portnum=15432

   • database=SIEM

   • username=dbauser

5. Modify eas_link_configure.properties to specify the name of the Sentinel Link Server and the port it will listen on:

   • sentinelLinkName=Sentinel Link Server ALL:1290

   • sentinelLinkPort=1290

6. Optionally, set the ESM_UTIL_ROOT property. The value of ESM_UTIL_ROOT is set to the current directory by default. You may also set it to an explicit value.

7. Set the JAVA_HOME variable to point to the JDK home directory.

8. Run the eas_link_configure utility with a command that follows this format:

   eas_link_configure dbauser_password <Action>
   

9. Examine the eas_link_configure.log file. All information and error output is written to the eas_link_configure.log file. View the log file for further details on the information or the errors.

   • The eas_link_configure.sh script will report if errors are found. After correcting the errors reported in the eas_link_configure.log, run the eas_link_configure utility again.

   • If no errors are reported for create, update, and delete actions, restart EAS in order for the changes to take effect.

10. To verify that the server has been successfully created:

    1. Go to the Sentinel Link Integrator in Sentinel RD Control Center and use the Test button to confirm success of the EAS Sentinel Link Server.

    2. Verify that events are arriving in EAS by generating a report.

    3. Query the events table in the EAS database to verify events are being forwarded successfully. Here a sample SQL query that uses a time range to verify the events:

       select * from EVENTS where EVT_TIME > '2011-01-13 09:00' AND EVT_TIME < '2011-01-13 10:00';
       

11. If the events are not being forward properly, check the EAS log files for errors.

12. If history is not disabled in your shell, then you are strongly advised to clear the history now in order to avoid retention of the PostgreSQL password in any history contents.

This section provides instructions for configuring a Sentinel server to send events to EAS. These instructions describe the approach Novell recommends for an initial setup.

Detailed steps for configuring a Sentinel server to send events to another Sentinel system are provided in Section 3 of the Sentinel Link Solution Guide. If you want to refine your configuration after performing the steps below, you should refer to this document for additional information.

To configure a Sentinel server to send events to EAS:

1. Log in to your Sentinel server as user novell.

   Set a password for user novell if you have not done so already. The Sentinel installer creates the user novell without password credentials.

2. Download the Sentinel Link Solution (June 2010 6.1r4) from Sentinel Link Solution Downloads.

3. Unzip the downloaded Sentinel Link Solution package.

4. Start Sentinel Control Center.

5. Import the new Integrator for the Sentinel Link Solution:

   1. In the Novell Sentinel Control Center, select Tools > Integrator Manager. The Integrator Manager window displays.

   2. Click Manage Plug-Ins.

   3. Click the Import (plus sign) icon in the Integrator Plugin Manager window.

      The Plugin Import Type window displays.

   4. Select Import an Integrator plugin file (.zip), then click Next.

      The Choose Plugin Package File window displays.

   5. Click Browse to locate the slink_integrator.zip file and click Next.

   6. Click Finish.

   7. Dismiss the dialogs.

6. From the Integrator Manager interface, configure an Integrator:

   1. Click the Add Integrator icon in the bottom left corner.

   2. Choose Sentinel Link Integrator from the Select Integrator drop down

   3. Specify a name for your Integrator, such as Sentinel Link Integrator to EAS.

   4. Specify a new Service Category, such as SL - Sentinel Link.

   5. Provide a description for the Integrator in the Description field.

   6. Click Next.

   7. Specify the IP address of the EAS Server in the Host Name text field.

   8. Specify the port number for the Sentinel Link configured on EAS. The default is 1290.

   9. Click Next on each of the remaining dialogs.

   10. Click Finish.

7. Import the Action plugin:

   1. In the Sentinel Control Center, select Tools > Action Manager.

   2. In the Action Manager window, click Manage Plugins.

   3. In the Action Plugin Manager, click the Import (plus sign) icon.

   4. In the Import Plugin wizard, select Import an Action plugin file (zip,inz), then click Next.

   5. Click Browse to locate the Sentinel-Link_6.1r3.acz.zip file and click Next.

   6. Click Next.

   7. Click Finish.

8. Create a new Action:

   1. In Action Manager, click the Add (plus-sign) icon.

   2. Specify an Action Name (for example, SLinkEAS).

   3. Choose Sentinel Link from the Action drop down

   4. Choose your Sentinel Link Integrator.

   5. Click Save.

   6. Dismiss the Action Manager dialog.

9. Create the Global Filters:

   1. In the Sentinel Control Center, click on the Admin tab.

   2. In the left navigation bar, select Global Filter Configuration.

   3. Click Add.

   4. Click the button under Filter Name. Perform the steps below for each of the following product names (note that some of the products have more than one name):

      • Novell Identity Manager

      • Novell eDirectory and EDIRECTORY

      • Identity Vault

      • Novell Modular Authentication

      • Novell iManager

      1. Click Add.

         1. Specify a Filter Name.

         2. Set Property to ProductName.

         3. Set Operator to the equals sign (=).

         4. Set Value to one of the product names listed above.

      2. Click Save.

   5. From the Global Filter Configuration dialog, perform these steps for each of the Filter Names you just created:

      1. Click Add.

      2. Select your newly created filter.

      3. Check the Active check box.

      4. Set Action to the Sentinel Link action configured earlier (SLinkEAS, in this example).

   6. Set Default Action to database.

   7. Click Save.