CA ControlMinder maintains logging settings it uses under the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\logmgr
The logmgr registry key contains the following registry entries:
The name of the CA ControlMinder audit backup file. Only CA ControlMinder can write to this file.
Default: ACInstallDir\log\seos.audit.bak
The group that can read the audit logs.
Default: ComputerAssociates
The name of the CA ControlMinder audit log file. When this file reaches the size specified in audit_size, CA ControlMinder closes the file, renames it with the name in audit_back, and creates a new audit log. Only CA ControlMinder can write to this file.
Default: ACInstallDir\log\seos.audit
Defines the maximal number of audit log backup files CA ControlMinder accumulates when it performs date-triggered backups. When the BackUp_Date configuration setting is set to anything other than none, CA ControlMinder continuously accumulates date-triggered backup files. This configuration setting lets you reduce disk space CA ControlMinder uses for audit log backups. When the number of audit log backup files reaches the limit you set, CA ControlMinder deletes the oldest backup file when it creates the newest.
Values:
Note: You cannot remove redundant audit log backup files manually because CA ControlMinder protects these automatically. Also, if the audit reporting is enabled, CA ControlMinder does not delete a backup file until the Report Agent finishes processing it.
Default: 50
The maximum size, in KB, of the CA ControlMinder audit log file. Do not specify less than 50 KB.
Default: 10240
Note: CA ControlMinder stops writing audit records to the audit file when the audit file size exceeds 2 GB.
The name of the CA ControlMinder audit filter file.
Default: ACInstallDir\data\audit.cfg
Specifies the criterion by which CA ControlMinder backs up the audit log file, and if CA ControlMinder adds a timestamp to the backup file name.
CA ControlMinder always backs up the audit log file when it reaches the size specified in the audit_size configuration setting.
Values: none, yes, daily, weekly, monthly
Note: CA ControlMinder counts the specified interval from the time that it creates the first audit log file, and backs up the file at midnight on the appropriate day.
Example: The configuration setting has a value of weekly and CA ControlMinder creates the audit log file at 9:00 a.m. Friday 1 April. Many audit events occur this week and the audit log file exceeds the audit_size configuration setting on Monday 4 April. CA ControlMinder backs up the audit log file on 4 April and adds a timestamp to the backup file name. A week after the audit log file was first created, at midnight Friday 8 April, CA ControlMinder again backs up the audit log file and adds a timestamp to the backup file name.
Limits: You must specify values in all uppercase or all lowercase.
Default: none
The name of the CA ControlMinder error backup file.
Default: ACInstallDir\log\seos.error.bak
The group that can read the error log files.
If this value is set to none, only Administrators can read the file.
Default: none
The name of the CA ControlMinder error log file. When this file reaches the size specified in error_size, CA ControlMinder closes the file, renames it with the name in error_back, and creates a new error log. Only CA ControlMinder can write to this file.
Default: ACInstallDir\log\seos.error
The maximum size, in KB, of the CA ControlMinder error log file.
Default: 50
Specifies whether the IR API library routes audit events of existing PMDs in addition to the local security service audit events.
all - routes audit events of Policy Models in addition to the local security service audit events.
localhost - routes audit events of the local security service only.
Default: all
(Windows 2008 only) Specifies whether seosd sends audit events to the Windows 2008 event log channel for CA ControlMinder (1).
Default: 0 (no)
Specifies whether seosd sends audit events to the Windows event log (1).
Default: 0 (no)
Copyright © 2013 CA Technologies.
All rights reserved.
|
|