Previous Topic: Download Agent Binaries

Next Topic: Tampered Configuration File Handling

Configure an Agent

You can configure an installed and registered agent after you access it in the Agent Explorer.

To configure an agent

  1. Click the Administration tab, and then the Log Collection subtab.

    The Log Collection folder list appears.

  2. Click the Agent Explorer folder.

    The folder expands, displaying Agent Group folders.

  3. Select the agent you want to configure, and click Edit at the top of the pane.

    Agent details appear in the details pane.

  4. Make any changes you want, including:
    User Name

    Defines the user name under which the agent runs.

    Port

    Sets the port the agent uses to communicate with CA Enterprise Log Manager.

    Agent Group

    Defines the group to which the agent belongs.

    Max Number of Files

    Sets the maximum number of files that can be created in the event reception file queue. The Max Number limit is 1000 files.

    Max Size per File

    Sets the maximum size, in MB, for each file in the event reception file queue. When a file reaches the maximum size, CA Enterprise Log Manager creates a new file. The Max Size limit is 2048 MB.

    Event Sending Mode

    Defines which of the following transmission styles the agent uses:

    • Failover - The agent sends events to the first server in the Log Manager Servers list. If communication is lost, it then attempts to communicate with each server in the order listed, until communication is restored.
    • Round Robin - The agent sends events to each server in the Log Manager Servers list in turn, attempting to contact the next server in the list after one hour. This period is not configurable.
    Enable Events Encryption

    Sets the agent to use AES128 to encrypt the events it transmits. Enabling event encryption will affect performance.

    Enable Dispatch Scheduling

    Sets the agent to send events only in a certain time span. Selecting the Enable Dispatch Sending check box displays Start Time and End Time fields. Enter the GMT time values you want in 24-hour clock format, with the following qualifications:

    • There must be at least one hour between the start and end time values.
    • If the start time value is higher than the end time value, the end time is set the day after the start time. For example, if you set the start time at 23, and the end time at 6, the transmission time span runs from 11 pm GMT through 6 am GMT of the following day.
    Replace IP address with hostname

    Sets the agent to replace the IP address of an event source with the hostname of the event source. All the connectors within the agent inherit this feature. If you want to enable the feature for all the agents in your environment, configure each agent separately. If you enable this feature, CA Enterprise Log Manager replaces the IP address with the hostname for the following CEG fields:

    • source_hostname
    • dest_hostname
    • agent_hostname
    • event_source_hostname
    • receiver_hostname
    Log Manager Servers

    Controls the CA Enterprise Log Manager servers to which the agent routes events, and the order in which they are contacted. You can use the shuttle control to select available servers and the arrow buttons to the right of the selected servers to set communication priority.

    Note: Update your CA Enterprise Log Manager servers before you update agents. CA Enterprise Log Manager servers support agents at or below their current version number. To help ensure proper storage of collected events when you configure or update agents, verify that the agent sends events only to CA Enterprise Log Manager servers whose level is the same as the agent or higher.

  5. Click Save.

More information

How to Create an Agent Group

View and Control Agent or Connector Status