Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Change Auditor - For Advanced Users 7.2 - Technical Insight Guide

Table of Contents

Change Auditor Services

Quest Change Auditor Coordinator Quest Change Auditor Workstation Agent Quest Change Auditor Agent Change Auditor for EMC

Change Auditor licensing processes

License check process Component licensing User counts

Component Start-up Considerations

Start up delays

Change Auditor network communications

Service Connection Points

CN=ChangeAuditor.Coordinator

Ports and protocols Network encryption

SMB protocol and share encryption Secure password storage Client to coordinator connection Agent to coordinator connection (version 6.x and 7.0.1) Agent to coordinator connection (version 7.0.2) Coordinator to SQL Server connection

Coordinator internal tasks

Forest topology collection Group expansion Alert processing License check Remote deployment Agent heartbeat check Refresh coordinator statistics Event aggregator SQL upgrade monitor Open handle Scheduled purge job Scheduled archive job Scheduled report job

Registry Settings

Force agent WCF port Force client port Force SDK port Use predefined GC for name resolution Allow collation switch Report zip limit SQL command timeout Enable ChangeAuditor Agent service to start with the Microsoft security update (KB2264107) Adjust memory dumps settings

Change Auditor built-in fault tolerance Change Auditor protection

Using multiple protection templates

How access rules are evaluated How scheduling and location works with denied access

Database Considerations

How to move the Change Auditor database and coordinator to another server How to estimate the required SQL server disk space How SQL Server Autogrow affects Change Auditor How to query an archive database

Account exclusions best practices

Agent heartbeat check

By default, the coordinator service marks an agent as ‘inactive’ when it has not received any updates from the Change Auditor agent for 30 minutes.

This interval can be changed from the Agent Heartbeat pane on the Coordinator Configuration page (Administration Tasks tab) of the client.

Refresh coordinator statistics

The coordinator status dialog that appears as part of the coordinator system tray application contains counts of events and alerts. These statistics are periodically recalculated by the coordinator to keep the information as up-to-date as possible.

Event aggregator

The event aggreator scheduled task handles the collecting of all incoming agent events. The coordinator receives agent events (batched from the agent) and stores them in temporary storage for bulk uploading to the database. If the bulk uploading has issues (timeouts, etc.), then those events are stored in transaction logs for future uploading. The coordinator can also report to agents that it is too busy (rejects events), which defers the agents from uploading events or allows the agent to send the events to a different coordinator.

SQL upgrade monitor

The SQL upgrade monitor scheduled task checks to see if any other coordinator is in the process of trying to upgrade. If it finds a different coordinator that is trying to upgrade, it shuts down the coordinator.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center