지금 지원 담당자와 채팅
지원 담당자와 채팅

Change Auditor 7.3 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Disable Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Coordinator Configuration

•
Coordinator Configuration page
•
SMTP Configuration
•
Configure email alert notifications/reports
•
Customize alert email content
•
Shared Folder Configuration
•
Group Membership Expansion
•
Add groups to Group Membership Expansion list
•
Agent Heartbeat Check
•
Disconnect client after 30 minutes of inactivity
•
Scheduled Task Handling

Coordinator Configuration page

The Coordinator Configuration page is displayed when you select Coordinator from the Configuration task list in the navigation pane of the Administration Tasks tab.

This page consists of the following:

•
SMTP Configuration - for enabling and configuring SMTP for email alerting and reporting
•
Shared Folder Configuration - for enabling and configuring shared folders for reporting
•
Group Membership Expansion - for defining the schedule for expanding nested membership of Active Directory groups that are referenced in searches (Who search criteria) or groups that are defined in the Member of Group auditing feature
•
Agent Heartbeat Check - for specifying how long the coordinator service is to wait before an agent that is not sending updates will be marked as ‘inactive’
•
Scheduled Task Handling - for specifying which coordinators should handle purge, archive, and scheduled reports jobs.

 

SMTP Configuration

To dispatch alerts and reports through email (SMTP) you must enable email notification and define the mail server to use in the SMTP Configuration pane on the Coordinator Configuration page. In addition, you can optionally specify Exchange host information if you want to use the Exchange Global Access List (GAL) to lookup email recipients.

Configure email alerting and reporting by specifying the following information in the SMTP Configuration pane:

 
Table 1. Coordinator Configuration page: SMTP Configuration pane field/control descriptions
Field/Control
Description

Enable SMTP for Alerts and Reporting

Select this to enable email alert notifications and reporting. Checking this option activates the remaining fields on this page to define the mail server to use.

NOTE: The settings set on this page are global settings and apply to all alert/report emails. For alerts you can override the reply to, alert subject, signature and body content for individual search queries using the settings on the Alert tab (Search Properties tabs). For reports, you can override the To and Reply addresses, specify carbon copy (Cc and Bcc) recipients, and modify the subject line for individual search queries using the Report tab (Search Properties tabs).

Mail Server

When SMTP is enabled for alerts and reporting, enter the name or IP address of the mail server in this text box.

NOTE: To configure a specific SMTP port, append the mail server (SMTP server name or IP address) with a colon and the required port.
NOTE: Change Auditor sends alerts/reports through a single SMTP (email) relay configuration even when multiple coordinators are configured. That is, all coordinators will use the same mail server for sending alert notifications and reports.

From Server

Enter the email address from which alert notifications and reports are to originate.

Instead of entering an email address, you can use the browse button to the far right of the From Address field to select the user whose email address is to be used for alert notifications and email reports.

Clicking this button displays one of the following dialogs:

•
The Select Active Directory Objects dialog (Directory object picker) allows you to locate and select an Active Directory user. Use the Browse or Search page to locate and select an Active Directory user.
This dialog is displayed when no Exchange host is specified in the SMTP Configuration pane of the Coordinator Configuration page.
•
The Select Exchange Users dialog allows you to search for and select a mail-enabled object from the Exchange Global Access List (GAL). On the Exchange tab, enter a name or partial name, at least three characters long, and click the Search button to lookup mail-enabled objects in the GAL. On the Active Directory tab, use the Browse or Search page to locate and select an Active Directory user.

This dialog is displayed when an Exchange host is defined in the SMTP Configuration pane of the Coordinator Configuration page.

Reply To

Enter the address where replies to alert/report emails are to be sent.

Instead of entering an email address, you can use the browse button to the far right of the Reply To field to select the user whose email address is to be used for alert notifications and email reports.

Clicking this button displays one of the following dialogs:

•
The Select Active Directory Objects dialog (Directory object picker) allows you to locate and select an Active Directory user. Use the Browse or Search page to locate and select an Active Directory user.
This dialog is displayed when no Exchange host is specified in the SMTP Configuration pane of the Coordinator Configuration page.
•
The Select Exchange Users dialog allows you to search for and select a mail-enabled object from the Exchange Global Access List (GAL). On the Exchange tab, enter a name or partial name, at least three characters long, and click Search to lookup mail-enabled objects in the GAL. On the Active Directory tab, use the Browse or Search page to locate and select an Active Directory user.

This dialog is displayed when an Exchange host is defined in the SMTP Configuration pane of the Coordinator Configuration page.

Alert Subject

Enter a customized subject line to replace the default text in the subject line for alert notifications. The default subject line contains the following information:

Change Auditor %Alert_Type% from %Alert_Coordinator_Name%: %Alert_Name%

Where:

%Alert_Type% is either ‘Alert’ or ‘Smart Alert’
%Alert_Coordinator_Name% is the name of the coordinator generating the alert
%Alert_Name% is the name of the alert that fired
NOTE: The Alert Subject does not apply to email reports.

Click the browse button to the far right of the Subject Line field to select the variables to insert into the subject line or to reset it back to the default content.

Expand the Insert Variable option to insert one or more of the following variables into the subject line:

•
ALERT_NAME
•
ALERT_TIME_SENT
•
ALERT_TYPE
•
ALERT_COORDINATOR_DOMAIN
•
ALERT_COORDINATOR_NAME
•
SMART_ALERT
•
SMART_ALERT_GROUPING
•
SMART_ALERT_OCCURRENCE
•
SMART_ALERT_PERIOD
•
SMART_ALERT_PERIOD_UNIT
•
BATCH_ID
•
EVENT_COUNT

Select Restore To Default to reset the subject line back to the default content. That is, remove any variables that were inserted.

Send Plain Text Email

Select this option to have the email notification sent in plain text format. (Default)

Send HTML Email

Select this option to have the email notification sent in HTML format.

Configure Body

Click this button to launch the Alert Body Configuration dialog where you can define the content of the main body, the event details and the signature to be included in your alert emails.

My Server Requires Authentication

Select this check box if the specified mail server requires authentication and enter the account information as described below.

Account Name

Enter the account name required to authenticate to the specified mail server.

Instead of entering the account name, you can use the browse button to the far right of the Account Name field to select the account to be used. Clicking this button displays the Select Active Directory Object dialog (Directory object picker). Use the Browse or Search pages to locate the user account to be used to authenticate to the mail server.

Password

Enter the password associated with the account name entered above.

NOTE: Blank passwords are not allowed.

Enable SSL

Select this check box to enable Secure Socket Layer (SSL) encryption protocol to create a secure connection for transmitting data from the mail server.

Exchange Host

(Optional) Entering the Exchange host information allows you to lookup email recipients from the Exchange GAL in addition to Active Directory. That is, when you click a browse button on the SMTP Configuration pane, Alert Custom Email dialog or Report tab to lookup an email recipient, the Select Exchange Users dialog appears which contains both an Exchange tab and an Active Directory tab.

Enter the internet host name of the Exchange mail server.

Use the field to the right of the Exchange Host field to select the Exchange version associated with the specified Exchange host.

Email

Enter your full email address.

My Host Requires Authentication

Select this check box if the specified Exchange host requires authentication and enter the account information as described below.

Account Name

Enter the user account name used to log into your email account.

Instead of entering the user name, you can use the browse button to the far right of the Account Name field to select the account to be used. Clicking this button displays the Select Active Directory Object dialog (Directory object picker). Use the Browse or Search pages to locate the user account to be used to authenticate to the Exchange host.

Password

Enter the password associated with the account name entered above.

NOTE: Blank passwords are not allowed.
 

Configure email alert notifications/reports

To dispatch configuration change alerts or reports through email (SMTP), you must enable email notification on the Coordinator Configuration page.

* 
NOTE: The settings set on this page are global settings and apply to all email alert notifications and reports.

For alerts, you can override the reply to, alert subject, signature and body content for individual search queries using the settings on the Alert tab (Search Properties tabs).

For reports, you can override the reply to address for individual search queries using the Report tab (Search Properties tabs).

* 
NOTE: Change Auditor sends alerts through a single SMTP (email) relay even when multiple coordinators are configured. That is, all coordinators will use the same mail server for sending alert notifications and reports.
To enable and configure email notifications/reports:
1
Open the Administration Tasks page and click Configuration at the bottom of the navigation pane (left pane).
2
Select Coordinator in the Configuration task list to open the Coordinator Configuration page.
3
On the SMTP Configuration pane, select Enable SMTP for Alerts and Reporting to enable email alert notifications and reporting. Checking this option will activate the remaining fields on this page to define the mail server to be used.
Enter the following information:
•
Mail Server
•
From Address
 
* 
NOTE: Use the browse button to the right of the From Address field to launch the Select Active Directory Object dialog (Directory object picker) or Select Exchange User dialog.

From the Select Active Directory Object dialog, use the Browse or Search page to locate and select a user.

If the Exchange Host information is entered at the bottom of the SMTP Configuration pane, the Select Exchange Users dialog appears. On the Exchange tab, enter a name or partial name, at least three characters long, in the Find field and click Search to lookup and select an Exchange user. On the Active Directory tab, use the Browse or Search page to locate and select an Active Directory user.

•
Reply To
* 
NOTE: Use the button to the right of the Reply To field to launch the Select Active Directory Object dialog (Directory object picker) or Select Exchange User dialog.

From the Select Active Directory Object dialog, use the Browse or Search page to locate and select a user.

If the Exchange Host information is entered at the bottom of the SMTP Configuration pane, the Select Exchange Users dialog appears. On the Exchange tab, enter a string at least three characters long in the Find field and click Search to lookup and select an Exchange user. On the Active Directory tab, use the Browse or Search page to locate and select an Active Directory user.

•
Alert Subject
* 
NOTE: Use the button to the right of the Alert Subject field to insert a variable into the subject line or to reset it back to the default content.
4
Select the appropriate option to have the email notification/report sent in plain text format (default) or HTML format.
5
Optionally, click Configure Body to define the content of the main body, the event details and the signature to be included in your alert emails. After configuring the alert body, click OK to return to the Coordinator Configuration page.
* 
NOTE: The Alert Body Configuration settings do not apply to email reports. To define the content (columns) to be included in a report, use the Layout tab. In addition, you can use the Report Layouts page (Administration Tasks tab) to create customized report layout template(s) defining the header and footer information to be used in your reports.
6
If the specified mail server requires authentication, select the My Server Requires Authentication check box and enter the account credentials to be used.
* 
NOTE: Use the button to the right of the Account Name field to launch the Select Active Directory Object dialog (Directory object picker). From this dialog, use the Browse or Search page to locate and select a user.
7
(Optional) Enter the Exchange host information as described below:
•
Exchange Host: Enter the internet host name of your Exchange mail server. Use the field to the far right of the Exchange Host field to specify the Exchange version for your Exchange host.
•
Email: Enter your full email address.
•
My Host Requires Authentication: Select this check box if the Exchange host requires authentication and enter the Account Name and Password used to log into your email account.
* 
NOTE: Use the button to the right of the Account Name field to launch the Select Active Directory Object dialog (Directory object picker). From this dialog, use the Browse or Search page to locate and select a user.
Configuring the Exchange host allows you to lookup email recipients using the Exchange GAL or Active Directory. That is, when you select a browse button to lookup an email recipient from the top part of the SMTP Configuration pane, Alert Custom Email dialog or Report tab the Select Exchange User dialog appears which contains an Exchange tab where you can enter a partial name to lookup users from the Exchange GAL.
8
Click Test SMTP to test the mail server configuration.
9
Once the mail server configuration is verified, click Apply Changes to save the configuration.
Now that SMTP alerting/reporting is enabled and configured, you can enable email alert notifications for individual search definitions using the Alert tab (Search Properties tabs) and/or reporting for individual search definitions using the Report tab (Search Properties tabs).
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택