Managing Event Sources; Adding Event Sources; Deleting Event Sources; Audit Server Options - Novell IDENTITY AUDIT 1.0 - GUIDE Manual

5.2 Managing Event Sources

Although Identity Audit is preconfigured to accept data from supported Novell applications, the
application servers themselves must be configured to send data to the Identity Audit server. This is
part of the basic setup for Identity Audit. For more information, see
Sources," on page
Section 5.2.1, "Adding Event Sources," on page 40
Section 5.2.2, "Deleting Event Sources," on page 40

5.2.1 Adding Event Sources

After new event sources start sending data to Identity Audit, the IP addresses for those event sources
are automatically added to the list of IPs that shows when you click show details for a Novell
application.

5.2.2 Deleting Event Sources

If there is an error with the connection for an event source, the event source can be deleted using the
yellow icon to the left of the IP address. If the event source starts sending data again, the connection
will be automatically re-established.

5.3 Audit Server Options

Administrators can change some settings regarding how Identity Audit listens for data from the
event source applications, including the port on which Identity Audit listens and the type of
authentication between the event source and Identity Audit.
1 Log into Identity Audit as an administrator.
2 Click the Collection link at the top of the screen.
3 Click the Configuration link on the right side of the screen.
4 Make sure that the Audit Server tab is selected.
40 Identity Audit Guide
23.
Section 3.3, "Configuring Event