RSANetWitness Logs

Event Source Log Configuration Guide

Accurev
LastModified:Thursday,May04,2017

Event Source Product Information:

Vendor:Accurev
Event Source:Accurev
Versions:6.0.1
Additional Downloads:
l sftpagent.conf.accurev
l passwdConfig.pl
l passwdUtils.pl
l server_admin_trig.pl
l server_user_utilities.pl
l server_utilitiestriggers.pl
l server_auth_trig.pl

RSA Product Information:

Supported On:NetWitnessSuite10.0andlater
Event Source Log Parser:accurev
Collection Method:File
Event Source Class.Subclass:Storage.ContentManagementSystems


 Configure Accurev
ToconfigureAccurev,youmustcompletethesetasks:
I. ConfigureAccurevtogeneratelogs

II. SetUptheSFTPAgent

III. SetuptheFileService

Configure Accurev to generate logs

1. Createatriggersdirectoryinsidethestorage/site_slicedirectory.

2. DownloadthefollowingtriggerPERLscriptsfromSCOL,andcopythemintothe
triggersdirectorythatyoucreatedinstep1.

l server_auth_trig.pl

l passwdConfig.pl

l passwdUtils.pl

l server_admin_trig.pl

l server_user_utilities.pl

l server_utilitiestriggers.pl

3. ChangetheextensionforthefilesbasedonyourOS.Forexample,renameserver_
auth_trig.plasfollows:

l Linux/UNIX:leaveasserver_auth_trig.pl,orrenametoserver_auth_trig

l Windows:renametoserver_auth_trig.bat

4. Inthesamemanner,changetheextensionsfortheotherfiles.
ForexampleonWindows,youmighthavethefollowingpathforserver_admin_
trig.bat:
C:\Program Files\AccuRev\storage\site_slice\triggers\server_
admin_trig.bat

Set Up the SFTP Agent

TosetuptheSFTPAgentCollector,downloadtheappropriatePDFfromRSALink:

Configure Accurev 2
 Event Source Log Configuration Guide

l TosetuptheSFTPagentonWindows,seeInstallandUpdateSFTPAgent

l TosetuptheSFTPagentonLinux,seeConfigureSASFTPAgentshellscript

Configure the Log Collector for File Collection

PerformthefollowingstepstoconfiguretheLogCollectorforFilecollection.

To configure the Log Collector for file collection:

1. IntheNetWitnessmenu,selectAdministration>Services.

2. IntheServicesgrid,selectaLogCollector,andfromtheActionsmenu,chooseView
>Config>Event Sources.

3. SelectFile/Configfromthedrop-downmenu.
TheEventCategoriespaneldisplaystheFileeventsourcesthatareconfigured,ifany.

4. IntheEventCategoriespaneltoolbar,click+.
TheAvailableEventSourceTypesdialogisdisplayed.

5. Selectthecorrecttypefromthelist,andclickOK.

3 Configure the Log Collector for File Collection

 Event Source Log Configuration Guide

SelectaccurevfromtheAvailable Event Source Typesdialog.

ThenewlyaddedeventsourcetypeisdisplayedintheEventCategories
panel.

6. SelectthenewtypeintheEventCategoriespanelandc lick+intheSourcespanel
toolbar.
TheAddSourcedialogisdisplayed.

Configure the Log Collector for File Collection 4

 Event Source Log Configuration Guide

7. AddaFileDirectoryname,modifyanyotherparametersthatrequirechanges,and
clickOK.

8. StopandRestartFileCollection.Afteryouaddaneweventsourcethatusesfile
collection,youmuststopandrestarttheNetWitnessFileCollectionservice.Thisis
necessarytoaddthekeytotheneweventsource.

Copyright2017EMCCorporation.AllRightsReserved.

Trademarks
RSA,theRSALogoandEMCareeitherregisteredtrademarksortrademarksofEMCCorporation
intheUnitedStatesand/orothercountries.Allothertrademarksusedhereinarethepropertyof
theirrespectiveowners.

5 Configure the Log Collector for File Collection