Administration Guide › Agents › Planning Agent Configuration

Planning Agent Configuration

The EiamAdmin user installs agents based on the determination of the best collection method. Methods evaluated include the following:

• Agentless log collection directly from the CA User Activity Reporting Module server, sometimes referred to as Direct collection.
• Agentless log collection from a collection point
• Agent-based log collection from the host where the event source is running

The analysis that precedes installation can uncover some of the information needed by the Administrator who configures the agents and connectors.

The first step in configuring agents is to get the agent planning spreadsheet from the EiamAdmin or the alternative used to document where agents are installed. After configuring the first Administrator, the EiamAdmin user provides the Administrator with the annotated agent installation planning worksheet. The first Administrator, in turn, plans the needed connectors for each agent before beginning configuration.

The Administrator configures each agent installed by the EiamAdmin. In addition, the Administrator configures a connector for each event source, regardless of the collection method (agentless-direct, agentless-collection point, or agent-based). The Administrator configures connectors on each agent while logged on to the CA User Activity Reporting Module server which is to receive events from collected by that agent.

Note: The fewer connectors configured on an agent, the better the performance.

An exception to this process is when agent installation is performed silently. In this case, it is the installer who configures the connectors. The connectors configured on an agent enable the agent to collect raw events from specific event sources. The connectors translate raw events to refined events and pass the refined events to CA User Activity Reporting Module.

Creating agent groups is optional. If no custom agent groups are created, agents are assigned to the Default Agent Group. Administrators create agent groups for the following reasons:

• To enable reporting of events collected by agents in the same agent group.
• To enable the assignment of a different administrative user to different groups of agents. (User access can be limited to specified agent groups with access policies.)

Collected event logs are sent to a CA User Activity Reporting Module server for processing and initial storage. Administrators must configure the server that is to receive logs for each agent or agent group. Assigning a server to an agent group is a quick way to assign the server to all agents in the agent group.

More information:

Plan Agent Installation

Log Collection Planning