Previous Topic: About ConnectorsNext Topic: Sizing Your CA User Activity Reporting Module Network


About Log Sensors

A log sensor is the component in a connector that understands how to access event sources. CA User Activity Reporting Module provides log sensors for the following different types of event sources and log formats:

ACLogsensor

This log sensor reads CA Access Control events when CA Access Control uses selogrd for routing events.

FileLogSensor

This log sensor reads events from a file.

LocalSyslog

This log sensor collects events from any UNIX server's local syslog files.

ODBCLogSensor

This log sensor uses ODBC to connect to, and to retrieve events from, a database event source.

OPSECLogSensor

This log sensor reads events from a Check Point OPSEC event source.

SDEELogSensor

This log sensor reads events from Cisco devices.

Syslog

This log sensor listens for syslog events.

TIBCOLogSensor

This log sensor reads events from a TIBCO Event Message Service (EMS) queue in CA Access Control implementations.

W3CLogSensor

This log sensor reads events from a W3C log format file.

WinRMLinuxLogSensor

This log sensor enables the default (Linux) agent on the CA User Activity Reporting Module server to collect Windows events.

WMILogSensor

This log sensor collects events from Windows event sources using Windows Management Instrumentation (WMI).

Other log sensors may be made available through subscription updates. More information on configuring log sensors is available in the online help and the Administration Guide.