...
Now it’s time for driver configuration
...
Scroll down to see all the settings.
For Elasticsearch Server you must define your server. The URL must contain protocol, domain name, and port. If a reverse proxy isn't used, OpenSearch will be here in the URL as well.
For User set a user which has access to OpenSearch, default is “osadmin”. Also set a password for this user.
Lastly set the KeyStore filepath and its password (the one copied in Step 2)
Once done, the settings should look like this
...
Click Next. The following window is okay on defaults so click Next again.
...
Setting | Description |
|---|---|
Driver Name | Just driver name nothing more :) |
Audit template | Enter the full path to your template.json (legacy) |
Audit License File | Full path to the file containing Audit Driver Licence key on your IDM Server. Leave blank if you use the Audit Driver along with the Audit Proxy and native OpenSearch. |
Audit Index prefix | Alias of writeble audit index. Can be found in Web UI in Administration->Data Connectors->Event Service(<your connection name>) Please don't change it if you don't know why you are doing it. |
Count of retries to fatal error | If driver loose connection to Audit Server, it will try to resend the audit message for the specified amount of times and then will be shutted down. |
Scroll down to see all the settings.
For Opensearch Server you must define your server. The URL must contain protocol, domain name, and port. If a reverse proxy isn't used, OpenSearch will be here in the URL as well.
For User set a user which has access to OpenSearch, default is “osadmin”. Also set a password for this user.
Lastly set the KeyStore filepath and its password (the one copied in Step 2)
Once done, the settings should look like this
...
Setting | Description |
|---|---|
ACDI Server and Opensearch endpoint | URL of your ACDi instance jncluding protocol, domain name, port and endpoint for OpenSearch |
OpenSearch document type name | Type of document which will be set in requests |
User | Credentials which will be user for authentication. This user must have entitlements to wright to OpenSearch |
Password | |
KeyStore Type | Type of keystore used to hold certificate. PKCS12 and JKS available |
KeyStore filepath | Full path to KeyStore |
KeyStore passphrase | Password for KeyStore |
Click Next. The following window is okay on defaults so click Next again.
...
Setting | Description |
|---|---|
Save the Event XML document? | Save whole event xml document to view/use it in ACDI dashboards/reports |
Connected System | Value for the parameter "Connected System" which will be attached to event object. If you change this parameter, the dashboard called "NetIQ Audit Dashboard" will not work and should be reconfigured. |
Audit SYNC events | Defines if SYNC events will be processed or not |
Cut “Old/New Value” to the number of symbols | Limits length of “New Value” and “Old Value” parameters of event object. |
Strip attribute "modifiersName”? | "modifiersName" is a special attribute which allows to calculate correct modifier for this event. It should be added into Filter for all classes chosen for auditing. By default its changes aren't audited. |
Modifier accuracy period (seconds) | If difference between Audit Time and Event Time bigger than specified amount of seconds, calculated Modifier will be marked as "approximate" instead of "calculated" |
On Confirm Installation Tasks, click Finish.
...
See the deployment results and click OK.
...
| Info |
|---|
Please, set Driver security equivalencies equal to objects that have permission to read objects you want to monitor! In other cases, the driver will receive events only about himself! |
| Anchor | ||||
|---|---|---|---|---|
|
| Appanvil karma designer | ||||
|---|---|---|---|---|
|
...