Environment
Novell Audit 2.0.0
Novell Audit 2.0.1
Novell Audit 2.0.2
Microsoft Windows Server 2000 or 2003
Situation
When defining a notification rule, Event ID = eDirectory does
not appear in the drop down list.
The server was upgraded from a previous version of Novell
Nsure Audit, such as 1.0.3.
Other Event ID product groups are missing as well.
Resolution
Please do the following:
1.) Check and make sure that the instrumentation you are
looking for is actually installed. For example, if you are
looking for eDirectory, make sure that eDirectory is installed as a
Log Application. If the instrumentation is not installed,
please see #3.) below.
2.) Please perform the following steps:
a.) Login to iManager. Click on "Auditing and
Logging".
b.) Click on "Query Options" and then click on the"Product Events" tab. At the very top you will see "Novell
Audit Secure Logging Server DN". The Secure Logging Server
(SLS) server object should be contained in that box.
If the SLS server object is not there, then go browse for
the object and select it. Once the SLS server object is in
the box, click the "Update" button to save your changes. Go
back into your Notification filter and see if your missing
application is there.
3.) If #2.) above does not fix your problem, please do
the following steps:
a.) Login to iManager. Typically this is done athttp://or
ip-address>/nps/iManager.html .
b.) Click on the "Auditing and Logging" link.
Click on the "Logging Server Options". Browse to your Secure
Logging Server (SLS) object. Normall the SLS is located in
the "Logging Services" container just off of root. Once you
have your SLS, click on the "OK" button.
c.) Click on the "Log Applications" tab. Put a
check mark next to the log application you wish to delete. In
this case, it will be eDirectory. (If the problem is with a
different product, please select the appropriate product.)
Click on the "Application Actions" link and click on"Delete". You may be prompted to confirm your
selection.
d.) Once the application has been deleted, put a check
mark next to "Applications" and click on the "Application Actions"
link. Select "New". Put in the name of the application
(eDirectory Instrumentation). Then browse out to where your
LSC file is contained. If you have a Novell Audit CD, the LSC
files are located in the \NetWare\base\system\naudit
directory. The eDirectory instrumentation's LSC file is
edir_en.lsc. Once you have selected the eDirectory LSC file,
click on the OK button.
e.) Now that you have your log application installed,
shutdown and restart the SLS (lengine).