After you install Identity Manager, you can configure the Platform Agent. The Platform Agent’s configuration settings are stored in a simple, text-based logevent configuration file. By default, logevent is located in the following directories:
Table 3-1 Platform Agent Configuration File
Operating System |
File |
---|---|
Linux |
/etc/logevent.conf |
Solaris* |
/etc/logevent.conf |
Windows* |
\Windows_Directory\logevent.cfg The Windows_Directory is usually drive:\windows. |
The following is a sample logevent.cfg file.
LogHost=127.0.0.1 LogCacheDir=c:\logcache LogCachePort=288 LogEnginePort=289 LogCacheUnload=no LogReconnectInterval=600 LogDebug=never LogSigned=always
The entries in the logevent file are not case sensitive, entries can appear in any order, empty lines are valid, and any line that starts with a hash (#) is commented out.
The following table provides an explanation of each setting in the logevent file.
IMPORTANT:You must restart the Platform Agent any time you make a change to the configuration.
Table 3-2 logevent Settings
Setting |
Description |
---|---|
LogHost=dns_name |
The hostname or IP address of the Identity Audit Secure Logging Server where the Platform Agent sends events. In an environment where the Platform Agent connects to multiple hosts—for example, to provide load balancing or system redundancy—separate the IP address of each server with commas in the LogHost entry. For example, LogHost=192.168.0.1,192.168.0.3,192.168.0.4 The Platform Agent connects to the servers in the order specified. If the first logging server goes down, the Platform Agent tries to connect to the second logging server, and so on. For more information on configuring multiple hosts, see Configuring Multiple Secure Logging Servers in the Novell Audit 2.0 Administration Guide. |
LogCacheDir=path |
The directory where the Platform Agent stores the cached event information if the Identity Audit Secure Logging Server becomes unavailable. |
LogEnginePort=port |
The port at which the Platform Agent can connect to the Identity Audit Secure Logging Server. By default, this is port 289. |
LogCachePort=port |
The port at which the Platform Agent connects to the Logging Cache Module. If the connection between the Platform Agent and the Secure Logging Server fails, Identity Manager continues to log events to the local Platform Agent. The Platform Agent simply switches into Disconnected Cache mode; that is, it begins sending events to the Logging Cache module (lcache). The Logging Cache module writes the events to the Disconnected Mode Cache until the connection is restored. When the connection to the Identity Audit Secure Logging Server is restored, the Logging Cache Module transmits the cache files to the Secure Logging Server. To protect the integrity of the data store, the Secure Logging Server validates the authentication credentials in each cache file before logging its events. |
LogCacheUnload=Y|N |
Set the parameter to N to prevent lcache from being unloaded. |
LogCacheSecure=Y|N |
Set the parameter to Y to encrypt the local cache file. |
LogReconnectInterval=seconds |
The interval, in seconds, at which the Platform Agent and the Platform Agent Cache try to reconnect to the Identity Audit Secure Logging Server if the connection is lost. |
LogDebug=Never|Always|Server |
The Platform Agent debug setting.
NOTE:The Server option applies only to Identity Audit systems. |
LogSigned=Never|Always|Server |
The signature setting for Platform Agent events.
For more information on event signatures, see Signing Events in the Novell Audit 2.0 Administration Guide. |
LogMaxBigData=bytes |
The maximum size of the event data field. The default value is 3072 bytes. Set this value to the maximum number of bytes the client allows. Data that exceeds the maximum is truncated or not sent if the application doesn’t allow truncated events to be logged. |
LogMaxCacheSize=bytes |
The maximum size, in bytes, of the Platform Agent cache file. |
LogCacheLimitAction=stop logging|drop cache |
The action that you want the cache module to take when it reaches the maximum cache size limit.
|
For complete information on the Identity Audit Platform Agent, see Configuring the Platform Agent in the Novell Audit 2.0 Administration Guide.