Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
The current version of Indeed Log Server supports:
- Microsoft SQL Server
- PostgreSQL, PostgreSQL Pro
- Windows Event Log
| Note | ||
|---|---|---|
| ||
| Event reading is supported from only one storage (<ReadTargetId>). Event writing is supported in several storages (<WriteTargets>) simultaneously. |
Presettings
The read and write sources are configured in the configuration file C:\inetpub\wwwroot\ilsls\clientApps.config in the <Application Id="pam" SchemaId="Pam.Schema"> section.
The source for reading events is specified in the tags <ReadTargetId> .. </ReadTargetId>.
Sources for recording events are specified one by one in the <TargetId> .. </TargetId> tags and are listed in the WriteTargets section.
Go to the C:\inetpub\wwwroot\ls folder and edit the clientApps.config file by changing the item:
| Code Block | ||
|---|---|---|
| ||
<!--<Application Id="pam" SchemaId="Pam.Schema"> <ReadTargetId>pamEventLogTarget<<ReadTargetId>pam.EventLogTarget</ReadTargetId> <WriteTargets> <TargetId>pamEventLogTarget<<TargetId>pam.EventLogTarget</TargetId> </WriteTargets> <AccessControl> <CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" /> </AccessControl> </Application>--> |
this way:
| Code Block | ||||
|---|---|---|---|---|
| ||||
<Application Id="pam" SchemaId="Pam.Schema"> <ReadTargetId>pamEventLogTarget<<ReadTargetId>pam.EventLogTarget</ReadTargetId> <WriteTargets> <TargetId>pamEventLogTarget<<TargetId>pam.EventLogTarget</TargetId> </WriteTargets> <AccessControl> <!--<CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" />--> </AccessControl> </Application> |
Below, in the Targets section, make sure there is an uncommented line
| Code Block | ||
|---|---|---|
| ||
<Target Id="Pam.EventLogTarget" Type="eventlog"/> |
Setting up reading and writing events in the DBMS
Microsoft SQL Server
- Go to the directory C:\inetpub\wwwroot\ls\targetConfigs, create a copy of the file sampleDb.config and rename it to mssqlDb.config, then edit the mssqlDb.config file according to the settings below:
<Settings>… </Settings>:- Server - Name of the Microsoft SQL Server/PostgreSQL Pro server or named instance of Microsoft SQL Server
- Database - database name (ILS)
- User ID - service account for working with Indeed PAM databases
Password - service account password
Code Block language xml theme Confluence <Settings> <ConnectionString>Server=SQLServer;Database=ILS;Integrated Security=False;User ID=IPAMSQLService;Password=Password</ConnectionString> </Settings>
Warning icon false If using a named instance of Microsoft SQL Server, the value of the Data Source parameter must be set in the format <server name>\<instance name>.
Code Block language xml <Settings> <ConnectionString>Data Source=MSSQLServer\Named instance; ... </ConnectionString> </Settings>
In the file C:\inetpub\wwwroot\ls\clientApps.config edit the Application section for work with the mssqlDb.config file:
Code Block language xml <Application Id="pam" SchemaId="Pam.Schema"> <ReadTargetId>mssqlDb</ReadTargetId> <WriteTargets> <TargetId>mssqlDb</TargetId> </WriteTargets> <AccessControl> <!--<CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" />--> </AccessControl> </Application>Next in the same file in the Targets section add a new element:
Code Block language xml <Targets> ... <Target Id="mssqlDb" Type="mssql"/> </Targets>
PostgreSQL, PostgreSQL Pro
- Go to C:\inetpub\wwwroot\ls\targetConfigs directory, create a copy of the file sampleDb.config rename it to postgresDb.config, then edit the postgresDb.config file similar to the settings for Microsoft SQL Server.
In the file C:\inetpub\wwwroot\ls\clientApps.config edit the Application section for work with the postgresDb.config file:
Code Block language xml <Application Id="pam" SchemaId="Pam.Schema"> <ReadTargetId>postgresDb</ReadTargetId> <WriteTargets> <TargetId>postgresDb</TargetId> </WriteTargets> <AccessControl> <!--<CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" />--> </AccessControl> </Application>Next, in the same file in the Targets section add a new element:
Code Block language xml <Targets> ... <Target Id="postgresDb" Type="pgsql"/> </Targets>
Setting up writing
inevents both to the Windows Event Log and to the MS SQL DBMS
- Go to C:\inetpub\wwwroot\ls\targetConfigs directory, create a copy of the file sampleDb.config, edit it in a way of the type of DBMS used according to the instructions above.
In the fileC file C:\inetpub\wwwroot\ls\clientApps.config edit the Application section this way:
Code Block language xml <Application Id="pam" SchemaId="Pam.Schema"> <ReadTargetId>mssqlDb</ReadTargetId> <WriteTargets> <TargetId>mssqlDb</TargetId> <TargetId>Pam.EventLogTarget</TargetId> </WriteTargets> <AccessControl> <!--<CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" />--> </AccessControl> </Application>This example shows the configuration for reading events from the Microsoft SQL Server, writing events to the Microsoft SQL Server and Windows Event Log.
Next, in the same file in the Targets section, add the lines for mssqlDB and Pam.EventLogTarget:
Code Block language xml <Targets> ... <Target Id="Pam.EventLogTarget" Type="eventlog"/> <Target Id="mssqlDb" Type="mssql"/> </Targets>
| Backtotop | ||||
|---|---|---|---|---|
|
| Divbox | ||||
|---|---|---|---|---|
| ||||
|