Implementation Guide › Configuring Services › Event Sources and Configurations

Event Sources and Configurations

Most networks have some Windows and some syslog-based devices whose event logs must be collected, stored, monitored, and audited. Your network can also have other device types, including applications, databases, badge readers, biometric devices, or existing CA Audit Recorders and iRecorders. The CA Enterprise Log Manager services, adapters, agents, and connectors represent the configurations required to connect to these event sources to receive event data.

CA Enterprise Log Manager services include the following areas for configurations and settings:

• Global configurations
• Global filters and settings
• Alerting Service
• Correlation Service
• Event log store settings
• Incident Service
• ODBC server settings
• Report server settings
• Rule Test Service
• Subscription service configuration
• System status access panel

Service configurations can be global, meaning that they affect all CA Enterprise Log Manager servers installed under a single application instance name in the management server. Configurations can also be local, affecting only a selected server. Configurations are stored in the management server with a local copy on the collection CA Enterprise Log Manager server. In this way, if network connectivity is lost or the management server goes down for some reason, event logging continues without interruption on the collection servers.

The System Status access panel provides you with tools to affect a CA Enterprise Log Manager server and its services, and to gather information for Support. Additional information about this area is available in the Administration Guide and online help.