2.1 System Requirements

The following sections outline the system requirements for each Novell Audit component.

2.1.1 Secure Logging Server

The Secure Logging Server is the server component in the Novell auditing system. It is installed on the server where you want to manage the flow of information to and from the auditing system.

The server where you install the Secure Logging Server must meet the following requirements:

Requirement

Description

Operating System

  • Open Enterprise Server 1.0 SP1 or later (NetWare® and Linux*)

  • NetWare 6.5

  • Windows* 2003 Server

  • Windows 2000 Server SP4 or later

  • SUSE® Linux Enterprise Server 9 and 10 (32 bit and 64 bit, although Novell Audit only runs in 32-bit mode)

  • Red Hat* Linux 3 and 4 AS and ES (32 bit and 64 bit, although Novell Audit only runs in 32-bit mode)

  • Solaris* 8, 9, and 10

    IMPORTANT:Solaris 8 requires GCC 3.3 and zlib 1.2.3 to function as a Secure Logging Server. Without GCC3.3, applications fail to authenticate to the logging server. The resulting error in nproduct.log is, Failed SSL Handshake.

eDirectory™

Novell eDirectory version 8.7 or 8.8 must be installed on the server where the Secure Logging Server is located.

Processor

A single processor, server-class PC with a Pentium* II 400 Mhz

Disk Space

At least 40 MB

The space you need for your data store depends on a number of factors that include, but are not limited to, how many events per second you are storing and how long you want to keep the data. For MySQL, a system that generates around 80 events per second with an average event size of 80 bytes consumes approximately 500 MB of disk space for the database table and 150 MB for the index in a 24-hour period.

RAM

512 MB

2.1.2 Platform Agent

The Platform Agent is the client portion of the Novell auditing system. It is a shared library that is used by instrumented applications to log events to Novell Audit. It does not have any system requirements other than disk space for the Disconnected Mode Cache. (eDirectory is not required.)

The Platform Agent must be installed on every server running applications that log events to Novell Audit. The Platform Agent supports the following platforms:

  • Open Enterprise Server 1.0 SP1 or later (NetWare and Linux)

  • NetWare 6.5

  • Windows 2000

  • Windows 2000 Server SP4 or later

  • Windows XP Professional and Home Editions

  • Windows 2003 Server

  • SUSE Linux Enterprise Server 9 and 10 (32 bit and 64 bit, although Novell Audit only runs in 32-bit mode)

  • Red Hat* Linux 3 and 4 AS and ES (32 bit and 64 bit, although Novell Audit only runs in 32-bit mode)

  • Solaris 8, 9, and 10

2.1.3 eDirectory Instrumentation

The eDirectory Instrumentation enables Novell Audit to log eDirectory events. To avoid receiving duplicate entries for eDirectory events, select the Do not send replicated events option in the Novell Audit tab of the NCP Server object.

To log non-replicated eDirectory events (such as logins), the eDirectory Instrumentation and Platform Agent must be installed on each server where you want to log non-replicated events.

The eDirectory Instrumentation supports the following versions of the Directory:

  • eDirectory 8.7 (NetWare, Windows, Linux, and Solaris)

  • eDirectory 8.8 (NetWare, Windows, Linux, and Solaris)

2.1.4 NetWare Instrumentation

The NetWare Instrumentation allows Novell Audit to log NetWare and file system events. The NetWare Instrumentation and Platform Agent must be loaded on every server where you want to log NetWare and file system events.

The NetWare Instrumentation supports the following versions of NetWare:

  • NetWare 6.5

  • OES NetWare

2.1.5 Windows Instrumentation

The Novell Audit Windows instrumentation collects events from the Event Viewer and sends them to the Secure Logging Server for processing by Novell Audit.

The Novell Audit Windows Instrumentation runs as a service on the following Windows platforms:

  • Windows 2000

  • Windows 2000 Server SP4 or later

  • Windows XP Professional and Home Editions

  • Windows 2003 Server

2.1.6 Log Parser Instrumentation

The Log Parser Instrumentation harvests events from text-based log files such as Syslog, Apache error logs, and Novell Application Launcher™ logs on all supported platforms.

Events are parsed one line at a time and formatted into the Novell Audit event structure. Parsing text-based log files allows Novell Audit to process and log events from applications that are not currently instrumented for Novell Audit.