Change Auditor - For Advanced Users 7.4

Tchater maintenant avec le support

Start up delays

Change Auditor network communications

Service Connection Points

CN=ChangeAuditor.Coordinator

Ports and protocols Network encryption

SMB protocol and share encryption Secure password storage Client to coordinator connection Agent to coordinator connection (version 6.x and 7.0.1) Agent to coordinator connection (version 7.0.2) Coordinator to SQL Server connection

Coordinator internal tasks

Forest topology collection Group expansion Alert processing License check Remote deployment Foreign Agent Credentials Agent heartbeat check Refresh coordinator statistics Event aggregator SQL upgrade monitor Open handle Scheduled purge job Scheduled archive job Scheduled report job

Registry Settings

Force agent WCF port Force client port Force SDK port Use predefined GC for name resolution Allow collation switch Report zip limit SQL command timeout Enable ChangeAuditor Agent service to start with the Microsoft security update (KB2264107) Adjust memory dumps settings

Change Auditor built-in fault tolerance Change Auditor protection

Using multiple protection templates

How access rules are evaluated How scheduling and location works with denied access

Database Considerations

How to move the Change Auditor database and coordinator to another server How to estimate the required SQL server disk space How SQL Server Autogrow affects Change Auditor How to query an archive database

Account exclusions best practices

Scheduled report job

The scheduled report job task checks every five minutes to determine if reporting is enabled and needs to email a search query report. The scheduled reporting feature uses the same SMTP configuration defined for alerting to distribute search query reports via email. Using the Report tab (Search Properties tabs) for a search, you can enable reporting and schedule the distribution of the report. When the scheduled report job task determines a report is to be sent, the report is sent as an attachment via email to the designated recipients. The default is to zip the attachment when the report is 1 MB or greater.

Registry Settings

This section provides information about the different registry settings that can be used to control Change Auditor.

•

Force agent WCF port

•

Force client port

•

Force SDK port

•

Use predefined GC for name resolution

•

Allow collation switch

•

Report zip limit

•

SQL command timeout

•

Enable ChangeAuditor Agent service to start with the Microsoft security update (KB2264107)

•

Adjust memory dumps settings

Force agent WCF port

Use the following registry setting to force the coordinator to use a specific port to listen for Change Auditor agent connections.

Table 9. Registry setting: Force agent WCF port
Location	Registry
Path	HKEY_LOCAL_MACHINE\SOFTWARE\Quest\ChangeAuditor\Coordinator
Value Name	Agent Wcf Port
Value Type	DWORD
Value	Port number

Force client port

Use the following registry setting to force the coordinator to use a specific port to listen for client connections.

Table 10. Registry setting: Force client port
Location	Registry
Path	HKEY_LOCAL_MACHINE\SOFTWARE\Quest\ChangeAuditor\Coordinator
Value Name	Client Port
Value Type	DWORD
Value	Port number

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation

Veuillez sélectionner votre produit

Afin de mieux répondre à vos besoins, précisez l'objet du tchat:

Solutions recommandées pour votre problème

Change Auditor - For Advanced Users 7.4 - Technical Insight Guide

Scheduled report job

Registry Settings

Force agent WCF port

Force client port