NetVault 13.3.2 - Administration Guide

The Auditor Daemon (nvavp) tracks and controls all user activities in NetVault. This process runs on the NetVault Server. The Auditor Daemon validates each user request, and depending on the assigned privileges, allows or denies a request. Audit log messages are stored in the NetVault Database.

By default, the Auditor Daemon logs every user activity regardless of whether the request is granted or denied. It automatically deletes the log messages that are older than 31 days. You can configure the Auditor Daemon to log only failed user requests. You can also modify the default settings to change the maximum age for log messages.

You can modify the Auditor Daemon settings from the Change Settings page.

Configuring Auditor to log only failed requests

By default, the Auditor Daemon logs every user request, regardless of whether the request is granted or denied. You can configure the Auditor Daemon to log only failed user requests.

To configure the Auditor Daemon to log only failed requests:

In the Navigation pane, click Change Settings.

On the NetVault Server Settings page, under System and Security, click Auditing. In the Auditing dialog box, configure the following setting:

•

Only record failed requests in the audit trail: To log only failed user requests, select this check box.


	NOTE: You must restart the NetVault Service to apply any changes to this setting.

Click Apply to apply the new settings and close the dialog box.

Modifying the purge policy for audit logs

Audit log messages that are older than 31 days are automatically purged from the database. You can use the configuration settings for Logging Daemon to change the maximum age for log messages.

To modify the purge policy for audit logs:

In the Navigation pane, click Change Settings.

On the NetVault Server Settings page, under System and Security, click Auditing. In the Auditing dialog box, configure the following settings.

Table 138. Auto-purge settings for audit logs
Setting	Description
Purge entries by age	To purge log entries that are older than the maximum age set for the log messages, leave this check box selected. The maximum log age is specified in the Purge entries that are older than box. Automatic purging of log messages is disabled if you clear this check box. NOTE: The audit logs can consume a considerable amount of disk space. Therefore, you must periodically purge the log files. Since you cannot purge the audit logs manually, we recommend that you do not disable this feature.
Purge entries that are older than (days)	Type or select the maximum age for the log messages. The log age is specified in number of days. The default value is 31 days.
Time interval between purges (hours)	Type or select the interval between two purge events for audit logs. The time interval is specified in number of hours. The default interval is 24 hours.
Purge events that are older than (days)	Type or select the maximum age for the event. The event age is specified in number of days. The default value is 31 days.

Click Apply to apply the new settings and close the dialog box.

Configuring firewall settings

Firewall settings are required to communicate with NetVault Clients that reside outside the firewall. You can use these settings to specify the TCP/IP ports for establishing data transfer channels, message channels, and broadcast channels through the firewall.

You can configure the firewall settings when adding a client, or update these settings from the Change Settings page. You can also use the NetVault WebUI or Txtconfig utilities to configure the firewall settings for new or existing clients.

To configure firewall settings:

Access the firewall settings by using any of the following methods:

•

NetVault WebUI:

In the Navigation pane, click Change Settings.

On the NetVault Server Settings page, complete one of the following actions:

•

To configure default settings for the NetVault Server, go to Step C.

•

To configure default settings for a NetVault Client, click Clients. In the NetVault Clients table, select the client, and click Next.

Under System and Security, click Firewall.

•