8.1 Installing the Logging Components

You must install the Platform Agent on every server that you want to report events to the Secure Logging Server. You must also install the Instrumentation associated with every logging application that you want to report events to Novell® Audit.

To install the logging components on servers that will report events to the Secure Logging Server:

  1. Run the Novell Audit installation.

    For specific instructions, see Section 5.0, Installing and Activating Novell Audit.

  2. To install only the logging components, select the following install options:

    Platform

    Install Option

    Description

    NetWare®

    Install Novell Audit Instrumentation Agents

    Installs the Platform Agent (logevent.nlm), the NetWare Instrumentation (auditNW.nlm), and the eDirectory Instrumentation (auditDS.nlm).

    These instrumentations must be installed on any NetWare server that you want to report eDirectory™, file system, or NetWare events.

    IMPORTANT:Before you install the eDirectory instrumentation on NetWare, your server must be updated with the latest version of NICI. See Section 2.2.1, NICI for details.

    Linux

    eDirectory Instrumentation Files with Platform Agent

    Installs the Platform Agent (liblogevent.so), the eDirectory Instrumentation (libauditDS.so), the Platform Agent (liblogevent.so), and the Log Parser (logparse).

    The eDirectory instrumentation must be installed on any Linux server that you want to report eDirectory events.

    Solaris

    eDirectory Instrumentation Files with Platform Agent

    Installs the Platform Agent (liblogevent.so), the eDirectory Instrumentation (libauditDS.so), the Platform Agent (liblogevent.so), and the Log Parser (logparse).

    The eDirectory instrumentation must be installed on any Solaris server that you want to report eDirectory events.

    Windows

    Instrumentation

    Installs the Platform Agent (logevent.dll), the eDirectory instrumentation (auditDS.dlm), the Windows Instrumentation (nauditwin.exe), and the Log Parser (logparse.exe).

    The eDirectory and Windows instrumentations must be installed on any Windows server that you want to report eDirectory and Windows events.

  3. If you are installing the eDirectory Instrumentation on a server that is located in a different tree than your Secure Logging Server, you must also select one of the following install options to add the Novell Audit schema extensions to eDirectory:

    Platform

    Install Option

    NetWare

    Add Schema Extensions

    Linux, Solaris, Windows

    Extend Schema

    If the eDirectory Instrumentation is located in the same tree as your Secure Logging Server, the schema is extended during the Secure Logging Server installation.

  4. If you are upgrading from a previous version of Novell Audit and the installation finds an existing Platform Agent configuration file (logevent.cfg or logevent.conf), the installation asks if you want to overwrite the Platform Agent configuration file. Do not overwrite the existing file unless you want your Platform Agent to revert to the default configuration settings.

  5. After the installation is complete, configure the Platform Agent on each server as explained in Section 8.2, Configuring the Platform Agent.