InTrust 11.5.1 - Preparing for Auditing Recovery Manager for Active Directory

Recovery Manager for Active Directory Auditing Overview

The Recovery Manager for Active Directory Knowledge Pack expands the auditing and reporting capabilities of InTrust to Dell™ Recovery Manager for Active Directory. It lets you gather events about Recovery Manager for Active Directory sessions and make reports on these events. You can also analyze diagnostic information, which is gathered to the repository.

Requirements

The Knowledge Pack is compatible with SQL Server 2014 Reporting Services or later. It works with Recovery Manager for Active Directory 7.9 or later.

Setup

The Knowledge Pack is installed as part of the main InTrust installation.

InTrust Objects

InTrust setup includes the following InTrust objects related to Recovery Manager for Active Directory:

• “RMAD Events from Application Log” filter for the “Windows Application Log” data source
• “RMAD Events: RMAD host and agent events” gathering policy:
• “RMAD Events: RMAD host and agent events” import policy
• “RMAD events daily collection” task
• Sites:
  • RMAD site (Host)
  • RMAD site (DCs)

After installation, the policies are immediately ready for use. The task does not require additional configuration either, but you should consider working with a copy of the task so that the original task contains backup configuration.

Only the predefined sites need tweaking to make the workflow fit your environment, as follows:

1. Populate the “RMAD site (DCs)” site with the domain controllers in your environment.
2. Include the Recovery Manager for Active Directory host computers in the “RMAD site (Host)” site.

Report Pack

The Recovery Manager for Active Directory report pack includes only the “Backup Jobs History” report. After you have completed the InTrust installation wizard, the report appears in the new InTrust | InTrust for Servers and Applications | Dell RMAD report set in Knowledge Portal.

Collecting Recovery Manager for Active Directory Data

The “RMAD events daily collection” task includes a job that gathers all of the data that the Knowledge Pack is designed for.

The task’s schedule is disabled by default. To enable the schedule, open the task’s properties and select the Schedule enabled option. The default schedule specifies that collection takes place daily. If necessary, adjust the schedule and rename the task appropriately.

Instead of working with the predefined task directly, you can make a copy of it and use the copy. This way you will have a configuration reference in case you inadvertently make some undesirable changes to the task.

To log information about backup sessions in the Windows Application log

1. In the console tree, right-click the collection whose backup sessions you want to record to the Application log.
2. Click the Log tab, select the Application Log check box, and select Everything from the What to record list.