netiquslaie Absent Member.
Absent Member.
768 views

Sentinel Agents and Rotating App Logs


Hello,

I was wondering if the Sentinel agents are able to handle custom app
logs that rotate. I'm working with a customer where the app writes to a
specific log file (for example, audit.log). After that day is done, it
renames that log file by appending the date to the name
(audit.log.2017.03.01) and starts a new log file (audit.log).

I think in the old days, the Security Manager agent used to have trouble
with this. It just wouldn't read the new file that had the same name as
the old file. Is this still an issue with the Sentinel agent?

Thanks for your feedback!


--
netiquslaie
------------------------------------------------------------------------
netiquslaie's Profile: https://forums.netiq.com/member.php?userid=11227
View this thread: https://forums.netiq.com/showthread.php?t=57727

0 Likes
1 Reply
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Sentinel Agents and Rotating App Logs

On 03/30/2017 09:34 AM, netiquslaie wrote:
>
> I was wondering if the Sentinel agents are able to handle custom app
> logs that rotate. I'm working with a customer where the app writes to a
> specific log file (for example, audit.log). After that day is done, it
> renames that log file by appending the date to the name
> (audit.log.2017.03.01) and starts a new log file (audit.log).
>
> I think in the old days, the Security Manager agent used to have trouble
> with this. It just wouldn't read the new file that had the same name as
> the old file. Is this still an issue with the Sentinel agent?


I know the File connector can handle rotating files, but I do not know
specifically about the Sentinel agent, or its history with Security
Manager. I am guessing you MAY get a better response in the main Sentinel
forum rather than in the forum for the plugin/SDK.

https://forums.netiq.com/forumdisplay.php?38-Sentinel

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.