The Platform Agent, logevent, is the client portion of the Novell auditing system. The Platform Agent is required on any server that reports events to Novell Audit. It receives logging information and system requests from authenticated applications and transmits the information to the Secure Logging Server.
The Platform Agent’s configuration settings are stored in a simple, text-based configuration file (logevent). The default location of this file is as follows:
Table 8-1 Platform Agent Configuration File
|
Operating System |
File |
|---|---|
|
NetWare |
/etc/logevent.cfg |
|
Linux |
/etc/logevent.conf |
|
Solaris |
/etc/logevent.conf |
|
Windows |
/windows_directory/logevent.cfg The windows_directory is usually drive:\windows. |
Storing the Platform Agent’s configuration in a local text file makes the Platform Agent small, unobtrusive, and self-contained—that is, it has no external dependencies, so it is always available to receive logged events. Storing the Platform Agent’s configuration in a text-based file also allows the Platform Agent to eventually run on platforms that do not have eDirectory support.
The following is a sample logevent.cfg file.
LogHost=127.0.0.1 LogCacheDir=c:\logcache LogCachePort=288 LogEnginePort=289 LogCacheUnload=no LogReconnectInterval=600 LogDebug=never LogSigned=always
For detailed information on logevent parameters
and the Platform Agent Configuration tool, see Configuring
the Platform Agent
in the Novell
Audit 2.0 Administration Guide.