8.2 Configuring the Platform Agent

The Platform Agent, logevent, is the client portion of the Novell auditing system. The Platform Agent is required on any server that reports events to Novell Audit. It receives logging information and system requests from authenticated applications and transmits the information to the Secure Logging Server.

The Platform Agent’s configuration settings are stored in a simple, text-based configuration file (logevent). The default location of this file is as follows:

Table 8-1 Platform Agent Configuration File

Operating System

File

NetWare

/etc/logevent.cfg

Linux

/etc/logevent.conf

Solaris

/etc/logevent.conf

Windows

/windows_directory/logevent.cfg

The windows_directory is usually drive:\windows.

Storing the Platform Agent’s configuration in a local text file makes the Platform Agent small, unobtrusive, and self-contained—that is, it has no external dependencies, so it is always available to receive logged events. Storing the Platform Agent’s configuration in a text-based file also allows the Platform Agent to eventually run on platforms that do not have eDirectory support.

The following is a sample logevent.cfg file.

LogHost=127.0.0.1
LogCacheDir=c:\logcache
LogCachePort=288
LogEnginePort=289
LogCacheUnload=no
LogReconnectInterval=600
LogDebug=never
LogSigned=always

For detailed information on logevent parameters and the Platform Agent Configuration tool, see Configuring the Platform Agent in the Novell Audit 2.0 Administration Guide.