To configure the External Agent API, you need to edit values in the following registry key:
HKEY_LOCAL_MACHINE\Software \ComputerAssociates\CA DLP \CurrentVersion\External Agent API
Automatically Created Registry Values
Within the External Agent API registry key, you may need to edit the following automatically-created registry values:
Type: REG_SZ
Data: This specifies the full path to the EVF file cache, that is, the folder into which the e‑mails will be written—see the diagram in ZANTAZ EAS integration. This path defaults to the \client\RDIcache folder on the External Agent API machine. You can edit the registry to specify an alternative location, for example, on a machine with more free disk space.
Type: REG_SZ
Data: (Used for EAS integration only.) Each message in the email archive is assigned to various categories. This registry value appends a category to this list for each message, marking it as ‘WGNHandled’. This is to prevent duplicate messages being moved into the EVF file cache. You can edit the registry to rename the default ‘WGNHandled’ category.
Type: REG_DWORD
Data: This specifies a minimum level of free disk space on the machine hosting the EVF file cache—see above. This threshold defaults to 10MB. You can edit the registry to set a different threshold.
If free disk space falls below this level, no further messages are moved from the e‑mail archive to the EVF file cache until free disk space increases. Messages still awaiting conversion to event files and subsequent saving to the file cache are flagged accordingly.
As soon as free disk space does increase, these flagged messages are picked up when the email archive indexer process (in the case of EAS, this is IndexerService.exe) next runs. They are then removed from the archive, converted to event files and saved to the EVF file cache as normal. No messages are lost from this process because of insufficient free disk space.
Manually Created Registry Values
In addition to registry values created automatically on installation, the following values are also supported. To use these registry values, you need to create them manually in the External Agent API registry key.
Type: REG_DWORD
Data: Defaults to 1. This specifies where the capture date assigned to imported events is set from. If this value is set to:
1 The timestamp is set to the date and time in the email. It is based on the delivery time or time sent.
0 The timestamp is set to the date and time when the email was processed by the External Agent.
Type: REG_DWORD
Data: Defaults to 0. This specifies whether audit e‑mails are processed by the External Agent API. Set this to a non-zero value to filter out audit emails; set this to zero to revert to the previous behavior (the External Agent API converts audit e‑mails to CA DLP events).
|
Copyright © 2012 CA.
All rights reserved.
|
|