Administration Guide › Integrations and Connectors › How to Create an Integration › Set OPSEC Configurations

Set OPSEC Configurations

You can control data access settings for integrations using the OPSEC sensor. You can use the CA-provided default settings for most event collection purposes, but you may want to alter these settings for custom integrations.

To set OPSEC configurations

1. Open the integration wizard, select the OPSEC sensor, and advance to the Default Configurations step.
2. Set or edit the following configuration values for the targeted event source:
   • EventLogName

     Defines the log name created for this integration. The log name is used to associate any XMP and DM files attached to the integration.

   • UpdateAnchorRate

     Defines the threshold, in events, at which an anchor value is created. If event processing is interrupted, the agent refers to the latest anchor to begin reprocessing. Setting a lower anchor rate reduces the chance of lost events, but affects performance since the anchor value is created more often. Setting a very high anchor rate increases workload, since many events would be reprocessed in the event of a processing interruption.

     Default: 1000

   • Read from beginning

     Controls whether the agent begins reading the file from the beginning if event processing is interrupted. If the check box is not selected, the agent resumes reading events using the anchor rate. If the check box is selected the sensor reads the log file from the beginning when you deploy a connector for the first time. Depending on the size of the database and the rate of event generation, the CA Enterprise Log Manager log sensor may take some time to synchronize with real-time events.

   • Server HostName

     Defines the event source name. This value can be a local machine name or a remote server name.

   • Server IP

     Defines the event source IP address. This value can be a local machine name or a remote server name.

   • Server Port

     Defines the port used for OPSEC communications.

     Default: 18184

   • Object

     Defines the name of the OPSEC application object.

   • Object Activation Key

     Defines the OPSEC application object password.

   • MaxEventsPerSecond

     Sets the maximum number of events that can be processed.

   • TZ Offset Sign

     Defines whether the event source time zone is ahead of or behind the CA Enterprise Log Manager time zone, using the plus or minus signs.

   • TZ Offset Hours

     Defines the difference in hours between the event source time zone and the CA Enterprise Log Manager time zone.

   • TZ Offset Minutes

     Defines the difference in minutes between the event source time zone and the CA Enterprise Log Manager time zone.

3. Click the appropriate arrow to advance to the wizard step you want to complete next, or click Save and Close.

   If you click Save and Close, the new integration appears in the user folder list, otherwise the step you choose appears.