Reference Guide › Registry Entries › The CA ControlMinder Registry › ReportAgent Key—Registry Settings

ReportAgent Key—Registry Settings

CA ControlMinder maintains Report Agent settings it uses under the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\ReportAgent

The ReportAgent registry key contains the following registry entries:

audit_enabled

Specifies whether you want to send endpoint audit data to the Distribution Server.

Values: 0—no; 1—yes

Default: 0

audit_filter

Defines the full pathname to the file that contains filtering rules for audit records that the Report Agent routes to an external source (such as CA Enterprise Log Manager). This file determines which records the Report Agent routes.

Default: ACInstallDir\Data\AuditRouteFlt.cfg

audit_queue

Defines the name of the queue to which the Report Agent sends endpoint audit data.

Default: queue/audit

audit_read_chunk

Defines the maximal audit records the Report Agent tries to collect in a single read of the audit files.

Limits: A positive integer.

Default: 300

audit_send_chunk

Defines the maximal audit records that the Report Agent sends to the Distribution Server in each connection. When the number of audit records the Report Agent collects reaches this number it sends these records to the Distribution Server.

Limits: A positive integer

Default: 1800

audit_sleep

Define the length of time the Report Agent sleeps between generating audit reports.

Limits: A positive integer representing a number of seconds.

Default: 10

audit_timeout

Defines the cycle at which the Report Agent must send endpoint audit data to the Distribution Server. If this amount of time passes from the last send, the Report Agent sends audit data to the Distribution Server even if the number of records it collected is less than the audit_send_chunk value.

Limits: A positive integer representing a number of seconds.

Default: 300

interval

Defines the interval, in minutes, at which CA ControlMinder generates and sends reports to the Distribution Server.

The schedule setting defines the interval start time and the days it operates on. If the Report Agent starts later than a scheduled occurrence, it sends a report at the next calculated interval (from the schedule) and then at the defined intervals after that on scheduled days.

Example: If you have schedule=8:30@Mon,Tue,Wed and interval=5 and the Report Agent loads on Tuesday at 8:47 am, the Report Agent generates and sends a report at 8:50 am. This is the earliest cycle calculated from the scheduled start using the 5 minute interval.

Values: 0—No interval (use scheduled occurrences only); positive integer—number of minutes to use as interval

Default: 0

reportagent_enabled

Specifies whether reporting is enabled (1) on the local computer.

Default: 0

schedule

Defines when reports are generated and sent to the Distribution Server.

You specify this setting in the following format: time@day[,day2][...]

For example, "19:22@Sun,Mon" generates reports every Sunday and Monday at 7:22 pm.

Default: 00:00@Sun,Mon,Tue,Wed,Thu,Fri,Sat

send_queue

Defines the name of the reporting queue on the Distribution Server to which the Report Agent sends snapshots of the local database and any PMDBs.

Default: queue/snapshots

restart_enabled

Specifies restart of the ReportAgent daemon. Specify 1 to enable the restart.

Default: 0

More information:

auditrouteflt.cfg File—Filter Audit Records Routing