Administration Guide › CA Enterprise Log Manager Integration › CA Enterprise Log Manager Functionality › How to Integrate CA Enterprise Log Manager with CA Identity Manager › Enable Auditing in CA Identity Manager

Enable Auditing in CA Identity Manager

To enable auditing in CA Identity Manager

1. Open the Management Console

   http://host:port//iam/immanage
   

2. Navigate to Environments, <Environment>, Advanced Setting, Auditing.
3. Export existing settings and save the file.
4. Modify the saved file with the following and save the modifications:
   • <Audit enabled="true" auditlevel="BOTH" datasource="auditDbDataSource"
   • Add audit profile for Password policies under the last audit profile already defined:

     <AuditProfile objecttype="FWPASSWORDPOLICY" auditlevel="BOTHCHANGED"/>

5. Import the file back into the Management Console and do any of the following to trigger aggregation of auditing information:
   • Tasks performed on User managed object
   • Tasks performed on Group managed object
   • Tasks performed on Password Policies managed object
6. Login to CA Enterprise Log Manager Server with the following URL:

   https://<host> : 5250/spin/calm/CALMSpindle.csp

7. To exercise existing reports, navigate to Queries and Reports, Queries, CA Identity Manager

   Note: You must have the Enterprise Log Manager Server already configured.

8. Depending on what tasks you have performed, open the following default reports to verify that events are coming:
   • System All Events by User  task invokes 'CA Identity Manager - System All Events' filtered by user ID
   • Account Management by Host task invokes 'Account Management by Host' as is
   • Account Creations by Account task invokes 'Account Creations by Account' as is
   • Account Deletions by Account task invokes 'Account Deletions by Account' as is
   • Account Lockouts by Account task invokes 'Account Lockouts by Account' as is
   • Certification Process Activity by Host task invokes 'CA Identity Manager - Process Activity by Host' as is
   • Password Policy Modify Activity task invokes 'CA Identity Manager - Policy Modify Activity' as is