Return
-
Title
Looking at the warehouse repositories in ITSS it seems to use InTrust repositories -
Description
Set up a subscription from Change Auditor to forward events to IT Security Search and disabled the Change Auditor connector, but not seeing any events in ITSS from Change Auditor now. -
Cause
ITSS has not been set up to look at the CA warehouse. -
Resolution
To set up retrieval of Change Auditor data from Warehouse
1. On your IT Security Search server, make sure the %ProgramData%\Quest\IT Security Search\settings.xml file exists. If it doesn't, this means IT Security Search settings have never been configured. To make IT Security Search create the file, you can change some minor option, save the settings and then change it back and save the settings again.2. Stop the ITSS.Server (Quest IT Security Search) service.
3. Open the %ProgramData%\Quest\IT Security Search\settings.xml file in a text editor.
4. Change this:to this:
5. Save the configuration file.
6. Start the ITSS.Server (Quest IT Security Search) service.