|
|
|
Add |
Depending on the page, use to add an entry to a search criteria list, add an object to an auditing list, define a new template, create a scheduled purge job, etc. |
Most Administration Tasks pages |
Add
|
Use the Add options as defined below:
• |
Add Role Definition - use to define a new role defining who is authorized to perform the selected tasks and/or operations. |
|
Application User Interface page |
Add
|
Use to add an entity (subsystem, event class, object class, severity or results) to the What search criteria list or purge criteria. |
What tab |
Add with Events
|
Use to add an entity that already has an event associated with it in the coordinator database to the What search criteria list or purge criteria. |
What tab |
Add with Events |
Use to add an entity that already has an event associated with it in the coordinator database to the search or purge criteria. |
Who tab
Where tab
Origin tab |
Add | Add Wildcard Expression |
Use to specify a wildcard expression for the search criteria or purge criteria. |
Who tab
Where tab |
Add | Add Server Types |
Use to specify a server type for the search criteria or purge criteria. |
Where tab |
Add | Exclude |
Use to exclude a mailbox from Exchange auditing. |
Exchange Mailbox Auditing page |
Add | Select Multiple Objects |
Use to define custom Active Directory and ADAM auditing - defining the objects, classes and/or attributes to be audited by Change Auditor. |
Active Directory Auditing page
ADAM (AD LDS) Auditing page |
Advanced Options | Advanced Options |
Use to display the Advanced Deployment Options dialog where you can view or modify the following settings:
|
Deployment page |
Advanced Options | ActiveRoles Integration
|
Use the Active Roles integration options as described below:
• |
Deploy Scripts Only - use to copy and run the Active Roles integration scripts on the Active Roles server. These scripts instruct Active Roles to capture the initiator information for all users and pass this information onto Change Auditor. |
• |
Deploy Scripts and Excluded Accounts - use to specify user and computer accounts that are to be excluded from this integration. Change Auditor then deploys the Active Roles integration scripts that signal Active Roles to retrieve the initiator information for all users except for those specified for exclusion. |
Refer to the Quest Change Auditor Installation Guide for more information on Active Roles integration. |
Deployment page |
Alert Properties |
Use to display the Alert properties across the bottom of the Alert History page. |
Alert History page |
Apply Changes |
Use to save your coordinator configuration settings. |
Coordinator Configuration page |
Assign |
Use to assign an agent configuration to the selected agents or to assign a template to an agent configuration. |
Agent Configuration page
Excluded Accounts Auditing page
SQL Auditing page
File System Auditing page
Registry Auditing page
Services Auditing page
File System Protection page |
Comments |
Use to enter a comment for the selected event. |
Event Details pane |
Configurations |
Use to display the Configuration Setup dialog to add, edit or delete agent configuration definitions. |
Agent Configuration page |
Connect To |
Use this button to select the domain controller to be used to apply ACLs or to revert back to the client’s default global catalog.
|
Active Directory Protection page
Group Policy Protection page |
Copy |
Use to copy the displayed event details to the clipboard. |
Log pages
Event Details pane
SQL tab
XML tab |
Credentials
|
Use to set, clear or test the credentials to be used for installing agents on the selected domain. |
Deployment page |
Default |
Use to reset the severity and enabled settings of the selected events back to the factory defaults. |
Audit Events page |
Default All |
Use to reset all agent configurations back to the default configuration. |
Agent Configuration page |
Delete |
Use to remove the selected entry from the list. |
Application User Interface page
Member of Group Auditing page
AD Query Auditing page
Exchange Mailbox Auditing page
Purge Jobs page
Report Layouts page
Who tab
Where tab
Origin tab |
Delete | Delete Administration Account |
Use to remove the selected administration account from an Active Directory, ADAM (AD LDS), or Group Policy protection template. |
Active Directory Protection page
ADAM (AD LDS) Protection page
Group Policy Protection page |
Delete | Delete Agent |
Use to remove the selected agent from an EMC or NetApp auditing template. |
EMC Auditing page
NetApp Auditing page |
Delete | Delete Excluded Account |
Use to remove the selected account from an Excluded Accounts auditing template. |
Excluded Accounts Auditing page |
Delete | Delete File Path |
Use to remove the selected file path from a File System auditing or protection template, an EMC auditing template or a NetApp auditing template. |
File System Auditing page
EMC Auditing page
NetApp Auditing page |
Delete | Delete Object |
Use to remove the selected object from custom Active Directory or ADAM auditing; an Active Directory, ADAM (AD LDS) or Group Policy protection template. |
Active Directory Auditing & Protection pages
ADAM (AD LDS) Auditing & Protection pages
Group Policy Protection page |
Delete | Delete Object Class |
Use to remove the selected object class from the Active Directory or ADAM (AD LDS) auditing list. |
Active Directory Auditing page
ADAM (AD LDS) Auditing page |
Delete | Delete Override Account |
Use to remove the selected override account from a protection template. |
Protection pages |
Delete | Delete Path |
Use to remove the selected path from the auditing template. |
SharePoint Auditing page |
Delete | Delete Registry Key |
Use to remove the selected registry key from a Registry auditing template. |
Registry Auditing page |
Delete | Delete Service |
Use to remove the selected service from a Service auditing template. |
Service Auditing page |
Delete | Delete SQL Instance |
Use to remove the selected SQL instance from a SQL auditing template. |
SQL Auditing page |
Delete | Delete Template |
Use to remove the selected auditing or protection template. |
Auditing pages
Protection pages |
Delete Criteria |
Use to remove the selected entry from the What search criteria list. |
What tab |
Design Report |
Use to launch the report designer to create a custom report layout for a selected search query. |
Report tab |
Disable |
Use to disable the selected events. |
Event Details pane
Audit Events page |
Disable Alert |
Used to disable a private alert. |
Private Alerts and Reports page |
Disable Report |
Used to disable a private report. |
Private Alerts and Reports page |
Edit |
Use to modify the selected item. |
Most Administration Tasks pages, including:
|
Edit Event Class |
Use to modify the selected entry in the What search criteria list. |
What tab |
Edit Logon |
Use to modify the type of logons included in a logon search. |
What tab |
Email |
Use to launch the configured email client to email the selected event details. |
Event Details pane |
Enable |
Use to enable the selected events. |
Audit Events page
Event Details pane |
Event Details |
Use to display the Event Details pane across the bottom of the Overview pane, Search Results page, or Alert History page. |
Overview page
Search Results page
Alert History page |
Event Logging |
Use to enable or disable event logging. |
Agent Configuration page |
Explorer View |
Use to show the explorer view in the left-hand pane of the Searches page. |
Searches page |
Find |
Use to search for text in the currently displayed trace log. Enter a word or string of characters to be located. |
Log pages |
Force Refresh |
Use to force a topology harvest refresh to discover new servers added to the Active Directory forest and display them on the Deployment page.
|
Deployment page |
Grid View |
Use to hide the explorer view and display only the Searches list on the Searches page. |
Searches page |
Hide Properties |
Use to hide the Search Properties tabs across the bottom of the Searches page.
Use to hide the Resource Properties pane across the bottom of the Agent Statistics page. |
Searches page
Agent Statistics page |
Hide Uninstalled Agents |
Use to remove uninstalled agents from the current Agent Statistics view. |
Agent Statistics page |
Hide Uninstalled Coordinators |
Use to remove uninstalled coordinators from the current Coordinator Statistics view. |
Coordinator Statistics page |
High/Medium/Low |
Use to change the severity level assigned to the selected events. |
Audit Events page |
Install or Upgrade |
Use to install or upgrade an agent on the selected servers. |
Deployment page |
Knowledge Base |
Use to display the associated Event Reference Guide. |
Audit Events page
Event Details pane |
Logs
|
Use the Log options as described below:
• |
Open Log - use to retrieve a Change Auditor trace log file and display it in the client. |
• |
Get All Logs - use to retrieve any associated logs and save them to a specified location on the local machine. |
• |
View Agent Log - use to display the current Change Auditor agent trace log in the Change Auditor client. |
|
Agent Configuration page
Agent Statistics page
Coordinator Statistics page
Deployment page |
Match Case |
Use to locate log entries that match the case that was entered in the search text. |
Log pages |
New
|
Use the New options as described below:
• |
New Folder - use to create a new folder in the explorer view of the Searches page. |
• |
New Search - use to create a new search definition. | |
Searches page |
New Servers |
Use to enable or disable the automatic deployment of agents to new servers found in your Active Directory forest. |
Deployment page |
Next |
Use to move to the next log entry that contains the search text. |
Log pages |
Overviews |
Use to display the Overview panes across the bottom of the Overview page. |
Overview page |
Preview Changes |
Use to run the search based on the changes made to the search query and display the results in the current Search Results page. |
Search Properties tabs (Search Results page) |
Preview Report |
Use to display a query results report. |
Report tab |
Previous |
Use to move to the previous log entry that contains the search text. |
Log pages |
Print
|
Use the print options to print or save the contents of the displayed page.
• |
Print - use to send the contents of the active page to a designated printer. |
• |
Print to File - use to save the contents of the active page to either an Excel (.xls) or comma delimited (.csv) file. |
• |
Print to PDF - use to save the contents of the active page to a PDF file. |
• |
Print Preview - use to display the print layout of the active page prior to printing it. |
• |
Page Setup - use to define the page settings for printing. | |
All pages |
Protect Object |
Use to protect Active Directory objects, ADAM (AD LDS) objects, Group Policy Objects, Exchange mailboxes, File System files and folders against unauthorized modifications. |
Event Details pane |
Refresh |
Use to retrieve and display the latest data available. |
Overview page
Log pages |
Refresh Configuration |
Use to retrieve the current agent configuration assignments. |
Agent Configuration page |
Refresh Status |
Use to refresh the deployment status of the selected servers. |
Deployment page |
Related Search |
Use to view additional details about the user who initiated the change, view resource details about the machine where the change occurred, or run related searches based on the who, where, what, when or origin of an event. |
Event Details pane |
Restart Agent |
Use to stop and then restart an agent. This button is only available when an agent is in an ‘active’ state. |
Agent Statistics page |
Restore Value |
Use to restore the current value (To value) to its previous value (From value).
|
Event Details pane |
Run |
Use to run the selected search and display the events returned in a new Search Results page. |
Searches page
Search Properties tabs |
Save |
Use to save a newly created search or modifications made to a search definition. |
Search Properties tabs |
Save As
|
Use the Save As options as described below:
• |
Save As - use to save the search definition using a different name and/or location. |
• |
Save As Default - use to save the search definition as the new default for creating new searches. | |
Search Properties tabs |
Search Properties |
Use to display the Search Properties tabs across the bottom of the page. |
Search Results page |
Select All |
Use to select all the entries in the currently displayed trace log, which can then be copied for use in another application. |
Log pages |
Set Agent Uninstalled |
Use to flag the selected agent as ‘uninstalled’.
|
Agent Statistics page |
Set Coordinator Uninstalled |
Use to flag the selected coordinator as ‘uninstalled’.
|
Coordinator Statistics page |
Shared Mailboxes |
Use to view automatically detected shared mailboxes or to define a shared mailbox on the Exchange Mailbox auditing page. |
Exchange Mailbox Auditing page |
Show Matched Entries Only () |
Use to display only the log entries that match the word/string of characters entered in the search text. |
Log pages |
Show Properties |
Use to display the Search Properties tabs across the bottom of the Searches page.
Use to display the Resource Properties pane across the bottom of the Agent Statistics page. |
Searches page
Agent Statistics page |
Show Uninstalled Agents |
Use to include uninstalled agents in the current Agent Statistics view. |
Agent Statistics page |
Show Uninstalled Coordinators |
Use to include uninstalled coordinators in the current Coordinator Statistics view. |
Coordinator Statistics page |
Start Agent |
Use to start a stopped agent. This button is only available when an agent is in an ‘inactive’ state. |
Agent Statistics page |
Stop Agent |
Use to stop an agent. This button is only available when an agent is in an ‘active’ state. |
Agent Statistics page |
Test SMTP |
Use to generate a test email based on the configuration information entered in the SMTP Configuration pane. |
Coordinator Configuration page |
Test SNMP |
Use to generate a test SNMP trap based on the configuration information entered in the SMTP Configuration pane. |
Coordinator Configuration page |
Uninstall |
Use to uninstall the agent from the selected servers. |
Deployment page |