Log in to OpenText Identity Console using your username and password.
Select Auditing.
Select the NCP Server you want to monitor, and then click OK.
NOTE:After you enable CEF events for any NCP server for the first time, few events will be selected by default.
Configure the CEF audit events:
Events Configuration: Enable or disable the following events based on the audit required for your environment:
NOTE:Individual event categories under the events configuration section will be collapsed by default. You can expand each category to select individual events.
|
Options |
Description |
|---|---|
|
Security Events |
Select the security events for which you want to log events. You can log events to add or delete member, to detect intruder, to change password and to authenticate users etc. |
|
Object Events |
Select the object events for which you want to log events. You can log events to create delete, rename, move and search objects. |
|
Attribute Events |
Select the attribute events for which you want to log events. You can log events to read and delete attributes and to add, delete and compare attribute value. |
|
LDAP Events |
Select the LDAP events for which you want to log events. |
Advanced Settings: Using the advance settings, You can perform the following actions.
Global: You can select or clear the global settings for duplicate entries.
Do Not Send Replicated Events: Select this option to stop receiving duplicate events due to replication from other servers.
Log Event’s Values: The events are logged into a text file. Event values with more than 768 bytes in size are considered “large values.” You can log events of any size.
Log Large Values: Select this option to log events that are more than 768 bytes in size.
Log Attributes Values: Select this option to display the attribute values. This is applicable to Add Value and Delete Value events only.
Log Encrypted Attribute Values: Select this option to display the encrypted attribute values. This is applicable to Add Value and Delete Value events only.
NOTE:If the event size is more than 768 byte size, the event value is truncated and saved to the log file.