HP RISS Components manual Enabling the Audit Log feature

Page 97

12 Audit Log

The Audit Log feature provides a surveillance system log for companies that are required to prove they are adhering to surveillance processes. This chapter describes how to enable the Audit Log feature, set retention periods, monitor status, and grant user access to the repository. For information on performing Audit Log repository queries, see the Audit Log section in the HP Reference Information Storage System User Guide.

The chapter includes the following topics:

Enabling the Audit Log feature, page 97

Granting user access to Audit Log repository, page 97

Monitoring status, page 98

Setting Audit Log repository retention periods, page 98

Enabling the Audit Log feature

The Audit Log feature is enabled per domain. To enable the Audit Log feature for a domain, add the following attributes in the /install/configs/primary/Domain.jcml file for each domain in which the Audit Log feature needs to be enabled:

AuditLogEnabled=true

domainLog_IP=<VIP for this domain>

If the RISS system is part of a replicated site, the value of the domainLog_IP attribute needs to be the VIP of the primary site.

To turn on windoc support:

DocClass=email,windoc

Granting user access to the Audit Log repository

By default, no user has access to the Audit Log repository. To grant access to a compliance officer or other user:

1.Log in to the Platform Control Center (PCC).

2.Go to the Account Manager view (User Management > Account Manager).

3.Click the User radio button at the top of the view.

4.Find the User’s name in the list.

You can search for the user with the letter buttons, or by using the search function.

See "Account Manager view features" on page 51 for information about user name searches.

5.In the RISS Account and LDAP Information form that appears, clear the check box labeled Deactivate this check box and then edit the user entries.

6.Click any entry in the Direct Repositories box.

There should be at least one entry in the box, for the user’s personal repository.

7.In the Adding Repository Information form that appears, click the Other tab.

8.Select the check box for the Audit Log repository, for example <domainname>.useraudit- log.repository.

Administrator Guide

97

Image 97
Contents T3559-90809 Page Contents Configuration Other user management featuresAccount Synchronization Account Manager AMReporting External accessPST Importer Audit Log Backup system administration14 Configuring Outlook 113 140 Index 145Figures Administrator Guide Tables Administrator Guide Page Intended audience About this guideRelated documentation HP technical support Document conventions and symbolsDocument conventions TIPOther web sites Subscription serviceProviding feedback About this guide RIM applications for users Riss overviewApplication Tasks Power off Riss power on/offPower on How to restart Riss after a power failureOpt/bin/restart Riss overview Introduction to Platform Control Center PCC Accessing PCCUser interface components PCC user interface User interface orientation tipsViews accessible from left menu Views for common system administration tasksViews for common tasks Updating views before printingMining Overview on Monitoring and reportingSmart cell life cycle states Statuses and statesSmart cell life cycle states Life cycle state Definition ImportanceDiscovery If the cell’s status is OK, only the mirror cell has FailedOverview System StatusApplication Events Link to OverviewApplication Events features Account Manager ServiceApplication Events features Appliance PerformanceAppliance Statistics Appliance Statistics features Appliance Statistics featuresStorage Status Riss VersionSystem Status Storage Status view featuresNot represented in the bar graph Link to Storage Status viewActual percentage of CPU use System Status view featuresAppliance Control Appliance Control view featuresStarting, stopping, and restarting servers on the system Performance Graph Performance Graph featuresExample Appliance Store graph Link to Performance Graph viewCreating performance graphs Example System Monitoring graphSystem Status Riss Configuration ConfigurationDomain Configuration Appliance ConfigurationLink to Firewall Settings view Firewall SettingsSSL Configuration Firewall portsCreating a certificate signing request Available certificate signing requestsDeleting a certificate signing request Installing and generating a certificate on the Http portals Installing and generating a certificate on the PCC portalSoftware Version Software Version view featuresDisplaying Software Version Opt/bin/restarthttp42 Configuration Account Synchronization overview Account SynchronizationCreating and running DAS jobs Creating Ldap server connectionsNew Ldap connection Creating jobsMapping information Mapping advanced optionsAssign a job to a portal Assigning Http portalsManaging available Http portals Editing or deleting jobsEditing or deleting available Ldap connections Starting, scheduling, and stopping DAS jobsViewing DAS history logs Account Manager overview Account Manager AMLink to Account Manager view Account Manager view Account Manager view features Account Manager view featuresManaging user accounts Adding a new userEditing user account information Editing user informationUser account information User account informationManaging repositories Managing groupsAdding repositories Edit the relevant entries Click the Save Now! button Editing repository informationRepository information Repository informationManual Account Loader Other user management featuresExporting user account information Loading user account informationError Recovery features Error RecoveryLinks to Error Recovery view Error Recovery featuresRepairing synchronization errors Other user management features Replication Data managementDatabase Replication This chapter discusses the following topicsRe-Initializing db2 replication Database Replication featuresDB2 on replica /opt/bin/repl/dbRepl status -brief -force Replication Status Replication Service General StatusData Replication Flow Data Replication FlowLink to Cloning view Smart cell cloningCloning view features Cloning view featuresCloning smart cells copying data Rescheduling all reprocessing schedules ReprocessingEditing reprocessing schedules Link to Reprocessing viewChanging the reprocessing status Using the Reprocessing UtilityViewing reprocessing history logs Repository-level retentionSearching for and editing a repository retention period Link to Retention viewUser Repository search results Editing domain retention periodsChanging the retention processing status Database and data backupViewing retention history logs Restoring DB2 and master configuration file backups Backup file locationsDB Backup History Link to DB and Data Backup viewOpt/bin/backup/db2BackupUtility -restoredb2 This will delete the content of the VolBack directoryUsr/local/tsmBackup/rotateMasterConfigBackup -restore Restoring the master configuration filesReporting Event Viewer featuresEvent Viewer Searching the Event ViewerSetting the Snmp server Other Event Viewer featuresSnmp Management Downloading the Riss MIBSelecting Snmp traps Email Reporter Setting Snmp CommunityReceiving Snmp events by email Detailed email reportsCreating and scheduling email reports Logfile SenderDetailed Email Reports Links to LogFile Sender view RIM Management External accessMining Overview Link to RIM Management viewMining Overview view features System ServicesSystem Services features Configured TasksJournal Mining features Configured Tasks featuresJournal Mining Selective Archiving Synchronize Deleted Items Tombstone MaintenanceExternal access PST Importer overview PST ImporterPST Importer process Archive Request fileInstallation requirements Installing PST ImporterInstallation procedure Archive Request Loader Using PST ImporterCreating or revising an Archive Request file Click New Following window appearsPSTLaunchMgr MaxProcesses=1 Creating a new fileHPPSTInit Verbosity=3 Using PST Import Monitor Validating file from command linePST Import Monitor Parameter DescriptionPST Import Monitor Collecting statistics impacts performance Displaying reports and log filesPSTImporter MonitorPath=UNCPath Archive Request file specifications Settings descriptionPSTImporter Verbosity=X Tag Description Tags in HeaderTags in FileSpec Sample filePST Importer Granting user access to the Audit Log repository Enabling the Audit Log featureAuditLogEnabled=true DomainLogIP=VIP for this domain Audit LogMonitoring status Setting Audit Log repository retention periodsRiss backup strategy Backup system administrationGaining access to the Riss backup server Tivoli Storage ManagerSeparate Group Volumes Smart cell data backupsTSM backup terms Policy domain structure How Riss configures TSMAdding and labeling new media Web interface Library properties Server process list Adding and labeling new media command lineRestoring a smart cell Provisioner status TSM Disaster Recovery Manager Preparing the backup server for disaster recoveryExample Preparing the backup server for a disaster Things to back upTsm INTERNALbackup db type=full devclass=DC.TAPE Tsm INTERNALset drmcouriername Joe’s courier serviceTsm INTERNALset drmvaultname Ironvault, somewhere Example 1. tsm INTERNALquery drmstatusExample Recovering the server from a disaster Recovering the backup serverINTERNALaudit library LIB.TAPE command RECPLAN.RECOVERY.SCRIPT.DISASTER.RECOVERY.MODE.CMDAdministrator Guide 111 Backup system administration Configuring your system for Exchange and Outlook 14 Configuring OutlookConfiguring user accounts on servers Scheduler,Registry settings Installing the Outlook plug-inUser accounts on customer servers For HKLM\Software\Hewlett-Packard\Outlook PlugIn\Cache For HKLM\Software\Hewlett-Packard\Outlook PlugIn\Search For HKLM\Software\Hewlett-Packard\Outlook PlugIn\PlugInURLsRetrievalHost=HOSTNAME Deprecated and is no longer used For HKLM\Software\Hewlett-Packard\Outlook PlugInInstalling and configuring the Outlook plug-in for users Manually creating other registry settingsConfiguring journal mining Setting registry key for journalingEnabling journaling on mailbox stores Configuring Exchange for email stub support Configuring mailbox miningPublishing forms Adding mailboxes using Mail Attender Setting up Information StoresSettings view button Scheduler Set up Auto-SearchStarting Scheduler Be selected by Mail AttenderEnabling load balancing message by message Scheduling an eventDocRef Host Httphost Editing selective archiving events Enabling a scheduled eventDomain.jcml Administrator Guide 125 Selective Archiving Event window Editing journal mining eventsJournal Mining Event window Editing Synchronize Deleted Items events Editing tombstone maintenance eventsSynchronize Deleted Items event window Copying a scheduled eventDeleting a scheduled event Modifying rules in Mail AttenderEnter a description Modifying a rule using Mail AttenderAdd Information Stores window Status View Starting selective archivingMonitoring View Monitoring View window Location of deleted items Deleting end-user deleted items on the RissConfiguring deletion retention PTDelItems TagUndeletedItems=FalseMailbox store Scheduling deletion from Riss Deletion settingsAppend to a CSV file Creating a Mail Attender ruleEnd-user delete security SetAdmin.exeCSV Columns Summary reportMultiple mail stores System requirementsTemporary storage in Drafts folder Multiple Riss systemsSession Configuring the asp.config file Asp.config file has several OWA configuration settingsMbarney=http//mbarney Papoon=http//papoon Browser functionality Changing the ASP time-outMulti-user support 144 Configuring Outlook Account Manager Service, 28 account synchronization Account Error Recovery view Account ManagerIndex Outlook plug-in,114 PST Importer EventsPCC Repairing, 58 system requirements
Related manuals
Manual 52 pages 16.72 Kb