Setting The Audit Server Options - Novell SENTINEL LOG MANAGER 1.0.0.5 - ADMINISTRATION GUIDE 03-31-2010 Administration Manual

4 In the Audit Server section, to start or stop the data collection for the audit server, select the On
and Off options.
5 In the Audit Server section, specify the port on which the Sentinel Log Manager server listens
to messages from the event sources.
For more information about setting the port, see
the Audit Server" on page
6 Set the appropriate client authentication and server key pairs settings.
For more information about client authentication, see
Server" on page
7 Select the Sentinel Log Manager server behavior when the number of events received exceeds
the buffer capacity.
Temporarily pause connections: Drops the existing connections and stops accepting new
connections until the buffer has space for the new messages. In the meantime, messages are
cached by the event sources.
Drop oldest messages: Drops the oldest messages to accept new messages.
WARNING: There is no supported method for recovering dropped messages, if you select
Drop oldest messages.
8 Select Idle Connection to disconnect event sources that have not sent data for a certain period
of time.
The event source connections are automatically re-created when they start sending data again.
9 Specify the number of minutes before an idle connection is disconnected.
10 Select Event Signatures to receive a signature with the event.
To receive a signature, the Platform Agent on the event source must be configured properly.
11 Click Reset to change the specified settings to previous settings before saving it
12 Click Save to save the new settings.
The Save button is disabled until a valid port is specified for the server.
These settings might affect data collection for several servers (for example, multiple eDirectory
instances). However, they do not start or stop services on the event source machines.
Changes on this page take effect immediately.
To view the health of audit server and its event sources, see
on page 60.

4.2.2 Setting the Audit Server Options

Administrators can change the settings about how Sentinel Log Manager listens for data from the
event source applications, set the port on which Sentinel Log Manager listens and the type of
authentication between the event source and the Sentinel Log Manager.
"Port Configuration and Port Forwarding for the Audit Server" on page 55
"Client Authentication for the Audit Server" on page 55
54 Sentinel Log Manager 1.0.0.4 Administration Guide
55.
55.
"Port Configuration and Port Forwarding for
"Client Authentication for the Audit
Section 4.4, "Managing Event Sources,"
TM