How to Modify CA Audit Policies to Send Events to CA Enterprise Log Manager

Implementation Guide › Considerations for CA Access Control Users › How to Modify CA Audit Policies to Send Events to CA Enterprise Log Manager

The process for modifying an existing CA Audit policy to send events to CA Enterprise Log Manager involves the following steps:

Gather the needed information:
- Verify that you have user credentials for the CA Audit Policy Manager with the authority to create, verify, and activate policies.
- Obtain the IP address or host name required to access the Audit Administrator user interface. The URL to access the r8 SP2-series Policy Manager server web application follows the form:
```
https://<IP_address_of_CA Audit_PM>:5250/spin/auditadmin
```
Configure the CA Enterprise Log Manager SAPI collector or SAPI router service, depending on how you intend to create the rule action.
If you plan to create a Collector action, configure the SAPI collector. If you plan to configure a Route action, configure the SAPI router.

Note: The example in this section uses the Collector action.
Locate and modify an existing CA Access Control policy to send events to CA Enterprise Log Manager.
Check and activate the changed policy to distribute it to the audit nodes.

Repeat this process to add new rule actions to other policy rules, as needed.

More information: