To audit an agent event, you must first enable the event in ZENworks Control Center. You can enable the event at the zone or device level. An event that is enabled at the zone level applies to all devices in the zone; an event that is enabled at the device level applies only to the selected device. For this workflow, we have used the Remote Management,event.
Remote Management events include tasks such as Remote Control, Remote View, File Transfer, Remote Execute, and Remote Diagnostics. Using the auditing capability, you can maintain a centralized log of who performed the operation and when was it performed. In the case of File Transfer, Remote Execute, and Remote Diagnostics you will be able to capture what was done during the session. For more information on the Remote Management events, see the ZENworks 11 SP4 Remote Management Reference.
Log in to ZENworks Control Center.
(Zone) To configure events at the zone, in the left pane, click.
(Devices) To enable events at the device, click. Locate the device in the Servers or Workstations folders, click the device object to display its properties, then click .
Clickto display the Events Configuration page.
In thetab, click to display the Add Agent Events dialog box.
For information about the agent event categories, see Agent Event Categories.
Expand the tree structure, then click.
Select thecheck box. For this example we have used the event. However, depending on which event you want to enable, you can select the appropriate check box.
Specify the following information for the:
Event Classification: Based on the importance of the event, select, or .
Days to Keep: Indicate the number of days to keep the event before purging it.
For information about purging audit events, see Section 6.1, Scheduling Audit Purge.
Notification Types : Specify whether the event notifications should be sent via email, SNMP Trap, or UDP. Using the email option, you can send notifications to multiple email addresses. Each email address should be separated with a comma.
You can also select multiple notification types. For more information, see
Specify therate at which data should be collected in order to generate audit events. This field is displayed only if a ZENworks Endpoint Security Management event or a ZENworks Adaptive Agent event is selected.
Clickto add the event.
You can edit or delete an event by selecting the event in the Event Configuration page and clickingor from the menu bar. To select multiple events at a time, press and click to select.
You can also search for events that have been enabled, by using the Search field in the Section 6.2, Searching for Events.page. For more information, see