Chat now with support
Chat with Support

Change Auditor 7.6 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Working with Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Group Membership Expansion

The middle pane of the Coordinator Configuration page contains options which allow you to define the schedule for expanding nested membership of Active Directory groups that are referenced in searches (Who search criteria) or groups that are defined in the Member of Group feature. Group membership will be recursively enumerated in order to determine nested group membership.

Use the following options to define group membership expansion behavior:

 
Table 2. Coordinator Configuration page: Group membership expansion options
Options
Description
Select the groups to expand

Select one of the following options to define how you want to expand groups:

•
Expand all groups - This expands all groups in the forest. Use this only if you are using SSIS and need the freedom to make requests for any group in the forest.
•
Expand groups that are referenced in existing queries - Change Auditor must expand all groups in queries in order to get their membership. With the membership, the events for the groups can be retrieved. This is always done and cannot be disabled.
•
Expand groups that are referenced in existing queries and selected groups (default) - In addition to the groups referenced in existing queries, you have the ability to select other groups. This would be useful when you have groups that need expansion for SSIS database requests, but you do not want to burden your production system with expanding all groups in the environment.

Group Membership Expansion list

The Group Membership Expansion list box is only available when the Expand groups that are referenced in existing queries and selected groups option is selected and displays a list of the groups to be expanded. Use Add to add groups to this list box and Remove to remove groups from the list box.

Add

Use to add groups to the group membership expansion list. Clicking this button will display the Select Active Directory Objects dialog allowing you to locate and select the groups to be added.

See Directory object picker for a description of the Browse, Search and Options pages. Note that the Find field on this dialog will display Group and cannot be changed.

Remove

Use to remove the selected group from the group membership expansion list.

Select the refresh frequency

Select from the following options to define how often you want to refresh the group membership expansion list.

Refresh group membership every nnn minutes

By default, group membership will be refreshed every 360 minutes. Use the arrow controls to increase or decrease this value.

Valid range: 10 - 43200

Number of groups to expand every 5-minute cycle

By default, 20 groups will be expanded every 5-minute cycle. Use the arrow controls to increase or decrease this value

Valid range: 1 - 100000

Refresh the list of expanded groups every nnn minutes

By default, the group membership expansion list is refreshed every 180 minutes. Use the arrow controls to increase or decrease this value.

Valid range: 10 - 43200

Defaults

Use to reset the fresh frequency settings back to the factory defaults.

Add groups to Group Membership Expansion list

By default, the Expand groups that are referenced in existing queries and selected groups option is selected on the Group Membership Expansion pane of the Coordinator Configuration page. With the option selected, you can add groups to the Group Membership Expansion list as described below:

1
Click Add to display the Select Active Directory Objects dialog.
2
Use either the Browse page or Search page to locate and select a group to be added to this list. Once a group is selected, click Add to add it to the selection list at the bottom of the dialog.
Repeat this step to add each additional group.
3
Once you have selected all the groups to be added, click Select to save your selection.
The specified groups will now be listed in the Group Membership Expansion list on the Coordinator Configuration page.
4
On the Coordinator Configuration page, click Apply Changes to apply your changes regarding group membership expansion.

Agent Heartbeat Check

Agent Heartbeat Check

The bottom pane on the Coordinator Configuration pane allows you to define how long the coordinator service will wait before an active agent that is not sending updates will be marked as ‘inactive’.

Use the following options to define the Agent heartbeat check settings:

 
Table 3. Coordinator Configuration page: Agent heartbeat check options
Options
Description

Agent goes offline after being inactive for nn minutes

By default, the coordinator service will mark an agent as ‘inactive’ when it has not received any updates from the agent for 30 minutes.

Use this setting to specify the period of time an agent must be inactive before the coordinator service marks it as ‘inactive’.

Valid range: 5 - 14400

Coordinator should try to restart agent service if an agent goes offline

Select this if you want to have the coordinator service try to restart an agent service before it marks it as inactive.

Disconnect client after 30 minutes of inactivity

Disconnect client after 30 minutes of inactivity

Enabling this option makes all client disconnect from the coordinator after 30 minutes of inactivity. If this is not selected, the option to disconnect after 30 minutes of inactivity can be selected by users when they log on to the client.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating