Home

LT Auditor+ 8.0 SP2 SQL Report Generator User Guide

1. 2 Allocate the space based on the database requirements Verify the number of records that will be inserted daily and the number of days or months the data will be stored Calculate the size of the database based on the number of days or months that the data will be stored 3 19 LT Auditor 8 0 SP2 SQL Report Generator 4 Create log files that are 25 to 30 percent of the entire database LT FLAT80 Properties x General Transaction Log Options Permissions Transaction log files File name Location Space Allocated MB LT FLAT80 Log H DATASLT_FLATSO_Log 1500 File properties v Automatically grow file r File growth Maximum file size C n megabytes E Unrestricted filearowth By percent fio F C Restrict filegrowth MB 2 H 5 After the database is created if you are using SQL 2000 from the Options tab change the Recovery model to Simple If you are using SQL Server 7 0 from the Options tab under Settings check the Truncate log on checkpoint check box 6 After creating the database run the scripts in Query Analyzer to create the table views and one deletion stored procedure a Click Start Programs gt Microsoft SQL Server Query Analyzer to display the SQL Server Query Analyzer window The Connect to SQL Server window displays Connect to the SQL Server where the database was created Click OK b From the Current Database drop down menu s
2. 8 From the Choose Destination Location window click Next to accept the default location or click Browse to change the location for the Report Generator files The Choose Folder window displays InstallShield Wizard E xj Choose Destination Location Select folder where Setup will install files Setup will install LT Auditor SQL Report Generator in the following folder To install to this folder click Next To install to a different folder click Browse and select another folder Destination Folder pe Auditor SQL Report Generator Browse InstallShield Cancel LT Auditor 8 0 SP2 SQL Report Generator 9 From the Choose Folder window select the location where the Report Generator files will be stored and click OK Next Choose Folder Please choose the installation Folder Directories E 2 Program Files EH Accessories 6 0 Blue Lance Inc 4 LT Auditor4 For NetWare 42 LT Auditor4 For Windows i 3 LT Auditor Report Generato C Common Files 7 ComPlus Applications Installing the Report Generator 10 When the Select Components window displays the following options are selected by default Cross Platform Report Package Generates reports from Cross Platform log files Novell NetWare Report Package Generates reports from NetWare log files Microsoft Windows Report Package Generates reports from Microsoft Windows log files Extended File System Repor
3. Window LT Auditor Processed Log 529 LT Auditor Processed Log 505 Delete Object__ Account Changed Administration Administration Window Window LT Auditor Processed Log 506_ LT Auditor Processed Log 509 __ Account Enabled Account Disabled Administration Administration Window Window LT Auditor Processed Log 530 LT Auditor Processed Log 531 Member Added Member Removed Administration Administration Window Window LT Auditor Processed Log 513 LT Auditor Processed Log 514 Assign Rights Remove Rights Select All Unselect Al Administration Administration Window Window LT Auditor Processed Log 507 LT Auditor Processed Log 508 From the Operations tab deselect the All Operations box and select the Include Operations or Exclude Operations button OK 3 From the Standard Operations tab select the desired operation by clicking the Select box next to the operation To choose all the operations click the Select All button LT Auditor 8 0 SP2 SQL Report Generator 4 Click OK to save your selections and display them in the Operations tab window 5 From the Operations tab click the Conditions tab to select more criteria for your query Then click Apply OK to save your query or click Run Report Run Report is the physical act of running a query to retrieve an output Report Output is the output t
4. Using the Report Generator Perform the following steps to add a class to your query l Check the All Classes box to include all available classes in the query Otherwise click Include Selected Classes to report on selected classes Click Exclude Selected Classes to report on all classes other than those selected in the Classes tab Click Add to include a class in your query The Cross platform operating system log classes window displays Cross platform operating system log classes m x Windows Domain Windows Global Group Windows Local Group windows Machine Windows User Windows Object Netware 95 Client Config Netware 95 Computer Printer Netware 95 Computer System Policies Netware 95 Desktop Preferences Netware 95 User System Policies Netware AFP Server Netware Application Ri mbenrme em Aure Faldas Select All Unselect Al Cancel Select the desired classes by clicking the appropriate box in the Select column or click Select All Click OK to save your selections and return to the Classes tab window In the report query window click the Properties Attributes tab to select more criteria for your query click Apply OK to save your query or click Run Report 4 15 LT Auditor 8 0 SP2 SQL Report Generator Properties Attributes Tab Cross platform operating system log que
5. LT AUDIT window Database User Properties LT AUDIT E x Permissions amp Database user public bd List all objects List only objects with permissions for this user Object Owner SELECT INSERT UPDATE DELETE EXEC DRI 4 usp InsertServer dbo v s usp_InsertSo dbo usp_InsertTime dbo usp_InsertUser dbo usp InsertValuel dbo usp_NodeList dbo usp_UserList dbo vwT emp dbo v v v lr ed 4 b Columns amp amp amp amp amp 3 ESSERE ES LS N Note The eyeglass icon in the Object column identifies the views the file icon in the Object column identifies the stored procedures 6 To ensure that the user has minimum rights to the SQL Report Generator perform the following steps in the SELECT column Onall views that are dbo owned put a check mark in the SELECT column On all stored procedures that are dbo owned put a check mark in the EXEC column Important Only the SELECT and EXEC rights should be modified 7 Click OK to exit the Database User Properties Properties LT AUDIT window 3 14 Constructing a Database Creating a Maintenance Plan for SQL Server Blue Lance recommends that you follow the recommended practices from Microsoft for maintenance of the LT Auditor database Blue Lance recommends that you Back up your database daily to a tape or a hard drive A backup wizard is provided in the Enterprise Manager window to guide you through
6. O CTREC OU CTRECMAIL CN RECI ssamuel bluelance com cchan bluelance com 5 Select a recipients name and click Add Click OK to save your changes and display the Add Recipient name window Using the Report Generator Click OK to include the user name in your query and display the Recipient List tab window Click Delete to remove the selected user from the query In the report query window click the Subject List tab to select more criteria for your query click Apply OK to save your query or click Run Report LT Auditor 8 0 SP2 SQL Report Generator Subject List Tab lx Miscrosoft Exchange Query i B osterime lt 1 v All Subjects om Include Subjects Cancel Exclude Subjects Add Delete Apply Bun Report didis Help Report Output Data Source D LT Auditor 8 5 Reports Exchange S ample DB Sample xch m Select the Subject List tab to query specific addressees 1 Check the All Subjects box to query all users within the network or deselect the box to query selected subjects 2 Click nclude Subjects to report on selected subjects or click Exclude Subjects to report all subjects other than those selected in the Subject List tab 3 To enter a specific subject click the Add button The following window displays Add Subject name 4 Inthe Subject Name field enter a subject Click OK The newly added subject name displays in the Subject Name column
7. Deleting a Report Query Perform the following steps to delete a query l Highlight the desired report group corresponding to the query you want to delete All queries in this group are displayed in the top right hand pane Highlight the query to be deleted To delete a query use any of the following methods From the System menu click Delete From the Standard toolbar click the Delete button Click Yes to confirm the deletion of the report query Copying and Pasting Queries Perform the following steps to copy and paste a query to the desired report group l p pM ub Highlight the desired report group to display all queries that are part of the selected group Highlight the query to be copied From the Standard toolbar click the Copy button Select the desired report group that the query is to be copied to Select the Paste button on the Standard toolbar Your query is now copied to a new report group Using the Report Generator Scheduling Reports x Schedule Job Information Start Date Dec 26 2002 Start Time 3 0424PM Frequency nds rj Job Description New Scheduled Repot Query File To Use DACodeXLIBRARYWewQuem rqn i DK Cancel Help A built in scheduler enables you to schedule the LT Auditor reporting process on a single daily weekly or monthly Because a large quantity of data can be collected during the audit process real
8. From the Locate Database File window select the location of your database and click OK 7 Under Filegroup enter Primary The scripts for table creation are designed to work with three file groups 1 Primary 2 Secondary 3 Secondaryl Spreading data files across multiple groups yields better performance from the database LT Auditor 8 0 SP2 SQL Report Generator 8 In the second row under File Name enter LT AUDIT Datal Keep the default location or specify a different location where you want the database to reside Under Filegroup enter Secondary 9 In the third row under File Name enter LT AUDIT Data2 Keep the default location or specify a different location where you want the database to reside Under Filegroup enter Secondaryl Database Properties LT AUDIT F xj General Data Files Transaction Log Database files LT AUDIT Data ga C A mssqi7 data LT_AU 100 PRIMARY LT_AUDIT_Datal E C Amssqi data LT_AU 500 SECON 200 SECON LT_AUDIT_Data2 C mssql data LT_AU Delete File properties v Automatically grow file m File growth Maximum file size C In megabytes fi Unrestricted file growth By percent fio x C Restrict file growth MB 2 n Cancel Help 10 Under File properties the check box Automatically grow file is selected by default This feature allows the currently selected file to grow automatically as more data space
9. a specific circumstance is met Use the following steps to add conditions to your query l By default on a new report query the Successful and All Errors check boxes are selected To select a specific error deselect the Successful and All Errors check boxes N Note Checking All Errors prevents you from selecting specific conditions such as error account disabled or invalid address Therefore if you check All Errors you must move to the next tab or save the query Select the desired conditions or click the Select All button From the Conditions tab click the Classes tab to select more criteria for your query click Apply OK to save your query or click Run Report 4 13 LT Auditor 8 0 SP2 SQL Report Generator Classes Tab Cross platform operating system log query xj Bs OperationsPertormedon BE Date a Time Z output Options a Operations HB Conditions a I Properties Attributes i users 5 Machines v AllClasses Cancel Include Selected Classes Apply Exclude Selected Classes n Bun Report Help Report Output Data Source D LT Auditor 8 5XReportsXCross Platform S ample DB S ample xml zs A class is a template or blueprint that defines the characteristics of an object and describes how the object should look and behave Example An administrator creates a group called Marketing In the system group is the class and Marketing is the object 4 14
10. display Perform the following steps to ensure that you connect to the appropriate data source file This data source file will be used by the Report Generator to gather data for your report queries 1 In the Server Name field enter the server name 2 Enter the user name and password in the designated fields 3 Click the Test Connection button to verify that you can connect to the selected database Click Save OK OK to save your changes or Cancel to exit without saving At any time you can click the Add New button to return to the Add a new data source window Using the Report Generator Adding a New Report Group gt LT Quattor SOL report generator YO SPZ System Options Help GDU ZK Hi Memo Eachargs Loge mH Eserded Fle Spite Loos l crie Windows Logs cg Noval Naas Loge Reput Group C Exception epa NT Acetate Reporte Sunna Ropes Window Evert Log Aepats Using the Report Generator you can create customized report groups and queries based on your business needs Before adding a new report group examine the preset report groups and queries They may already contain the criteria for the reports you need Perform the following steps to add a new report group 1 To access the Report Group window use either of the following methods From the System menu click New gt Report Group From the Standard toolbar click the New Report Group button 2 To enter a n
11. is needed To specify the file growth select In megabytes or By percent and enter the value 11 Under Maximum file size you can limit the file size Select from these options 4 Unrestricted File Growth Allows the file to grow as large as necessary 5 Restrict file growth MB Allows you to specify the maximum size in megabytes to which the file should be allowed to grow Constructing a Database 12 Click the Transaction Log tab In the Initial size field enter a number that represents 25 30 of the space allotted for your database Click OK to save changes Database Properties LT AUDIT E xj General Data Files Transaction Log amp Transaction log files Initial size MB LT AUDIT Log C mssql7 dataSLT_AUDIT Delete File properties r v Automatically grow file File growth Maximum file size C In megabytes Unrestricted file growth By percent 10 af C Restrict file growth MB 2 z z z Cancel Help 13 After the database is created if you are using SQL 2000 you must change the Recovery model to Simple from the Options tab If you are using SQL Server 7 0 from the Options tab under Settings check the Truncate log on checkpoint check box LT Auditor 8 0 SP2 SQL Report Generator Creating Tables Views Stored Procedures and Audit Triggers After the database has been created you must create the structure within the database for LT Auditor
12. more criteria for your query click Apply OK to save your query or click Run Report Using the Report Generator Recipient List Miscrosoft Exchange Query Sa Operations Sender List E Subject List DateTime Bi MIY All Recipients nclude Recipients Cancel Exclude Recipients Apply ecipient Name Add Delete Run Report didis Help Report Output Data Source D LT Auditor 8 5 Reports Exchange S ample DB S ample xch TA Select the Recipient List tab to query specific addressees Check the A Recipient box to query all users within the network or deselect the box to query selected users Click nclude Recipients to report on selected users or click Exclude Recipients to report all users other than those selected in the Recipient List tab LT Auditor 8 0 SP2 SQL Report Generator 3 Click Add to add a specific user to the query and to display the Add Recipient name window Add Recipient name 4 Enter the name of the user you want to include in your query or click the Browse button If you enter the user name you must use the full syntax For Windows NT enter domain Nusername For NetWare enter username context Select the desired user from the list provided If you click Browse the following window will display Browse for Recipients x sandra osborne eictrec com o CTREC ou CTRECMAIL cn Recipie O CTREC OU CTRECMAIL CN RECI
13. save your query or click Run Report 4 17 LT Auditor 8 0 SP2 SQL Report Generator Users Tab P By Operations Pertormedon BE Date a Time Z Oupt Options Nar Operations 8 conditions J Classes S Propertiesiattrintes EE Users g1 machines ck W All Users nclude Selected Users Cancel Apply Exclude Selected Users Bun Report Help iteh Report Output Data Source D LT Auditor 8 5 Reports Cross Platform S ample DB S ample xml a Select the Users tab to query specific users 1 Check the All Users box to query all users within the network or deselect the box to query selected users 2 Click Include Selected Users to report on selected users or click Exclude Selected Users to report all users other than those selected in the Users tab 4 18 Using the Report Generator 3 Click Add to add a specific user to the query and to display the Add a user window a Enter the name of the user you want to include in your query or click the Browse button If you enter the user name you must use the full syntax For Windows NT enter domain username For NetWare enter username context Select the desired user from the list provided If you click Browse the following window will display Select Users 4 xj AS BACKUP SERVER GLOBALNY FR aserda SALES BLANCE NIS BTAAFMG MKT NY FRB B1ADMSC CISD IT NY FRB BTAFBMG MKT NY FRB BTAJDIT CISD IT NY FRB BTAKLMG MKT N
14. to run properly This structure comprises four database components Oo Tables 1 Views 3 Stored procedures O Audit triggers To create the structure within the database 1 Click Start Programs Microsoft SQL Server Query Analyzer to display the SQL Server Query Analyzer window The Connect to SQL Server window displays Connect to the SQL Server where the database was created Click OK 2 From the Current Database drop down menu select the database created for LT Auditor 3 At the root of the LT Auditor CD click Database Scripts Microsoft SQL Server Objects Creation Script 4 Click Execute Query to create the tables indexes and constraints Creating Tables Views and Stored Procedures for Exchange Logs 3 10 If you are auditing Exchange logs you must create objects within that database To create the objects within the database 1 Click Start Programs gt Microsoft SQL Server Query Analyzer to display the SQL Server Query Analyzer window The Connect to SQL Server window displays Connect to the SQL Server where the database was created Click OK 2 From the Current Database drop down menu select the database created for LT Auditor 3 At the root of the LT Auditor CD click Database Scripts Microsoft SQL Server Objects Creation Script for Exchange 4 Click Execute Query to create the tables indexes and constraints Constructing a Database Creating Tables Vi
15. was actually captured Use Time Zone Specific Reporting Reports on all activities occurring at the specified date and time in a certain time zone O Select the Report on Inserted Date radio button to report on activities occurring when logs were inserted into a SQL server database This report is not affected by time zones Example An administrator is auditing a machine located in New York so the events are being logged in Eastern Standard Time EST User A deletes a file at 10 00 AM EST A group of log files are consolidated into a SQL Server database in Houston at 1 00 PM Central Standard Time CST EST is the time zone specified for the report The Log Date is 10 00 AM The Report On Inserted Date is 1 00 PM LT Auditor 8 0 SP2 SQL Report Generator Output Tab Cross platform operating systemlogquery OOOO x amp Operations 5 Conditions IL Classes g Properties A Users E Machines BS Operations Performed On Dae amp Time Jd Options Report Type ZZ Chronological Columnar Grouped by User rpt ne Cancel Apply Show Report On Screen C Save Report On File C Send Report To Printer E Mail Bun Report File Name D n S et Help UU oysaRepotsfomt e Em T Le e g johnsmith xcompany com markhuges ycompany com Data Source D LT Auditor 8 5 Reports Cross Platform S ample DBS ample xml 3 Use the O
16. C Use SOL Server authentication Loon Mame Password Cancel Help 2 In the SQL Server field enter the name of your SQL Server N Note This procedure must be performed on a computer with SQL Server client access tools installed LT Auditor 8 0 SP2 SQL Report Generator 3 Under Connection Information select Use Windows NT authentication to accept the login name and password assigned by the operating system Select Use SQL Server authentication to enter a SQL Server login name and password Click OK to continue The SQL Query Analyzer window will display E SUL Query Fevolyerr DM OM Quy jb aenn p o l1 Saas mug 6 e eom v s iron jasa ga PALO macie 4d Di Revedepreert DLatabowce QR LATET Erato raste LERRA ete FRA VERI CREATE PATADASE LT MWIDIT om PIY MANE LT ATDIT FILENAME c peogram files nicrcaoft sol serverinssqji cmta lT AUDIT dmta rat arze ico MAXRITT 200 PILEOROOTH Ji FILEOMOO Ecomare MEME LT_ATDIT_DATAJ FILENLIE c iprogresa files microgott sgi server resgi cmta lT AUOIT SATAL mds aur 100 HaXLIII 200 FILPGPORTM amp FILEONOUR TECONPAPTI waar LT AJP2T DATA FILENE r ipeogram filesimicrosoft sgl server resqiicece 1T_AMIT BATA ott 4 Insert the LT Auditor CD into the CD ROM drive of your SQL Server computer From the Standard toolbar select the Load SQL Script button a 6 Open the Database Creation Script sql file located on the LT Auditor CD i
17. HINESOFTW ARHBMBlue Lance Inc LT Auditor Administrator rights to the report installation path LT Auditor 8 0 SP2 SQL Report Generator Installing the Report Generator The Report Generator installs a set of report groups each report group has its own specific queries You can generate a report either by creating a report query or by using a built in query which can be applied to an LT Auditor data file To install Report Generator perform the following steps 1 Insert the LT Auditor CD into the CD ROM drive of the server or Workstation 2 If Autorun is enabled select Report Generator SQL Reports when the following screen displays If Autorun is not enabled execute Setup exe from the SQL Reports directory on the CD LT Auditor Radar for your network LT Auditor for Windows LT Auditor for NetWare Report Generator Register LT Auditor SLE CANCE COMPUTER SEC Installing the Report Generator 3 The InstallShield Wizard displays a welcome message Click Next to display the License Agreement window InstallShield Wizard x Welcome to the InstallShield Wizard for LT Auditor v8 0 SQL Report Generator The InstallShield Wizard will install LT Auditor SQL Report Generator on your computer To continue click Next Cancel 4 Press the Page Down key to read the entire agreement Click Yes to accept the terms InstallShield Wizard E License Agreement Please read
18. LT Auditor 8 0 SP2 SQL Report Generator LT Auditor Radar for your network TrA nu User Guide 3LLzsLAnczs COMPUTER SECURITY SOFTWARE CONTACT INFORMATION Blue Lance Inc 1700 West Loop South Suite 1100 Houston TX 77027 Phone number 713 680 1187 Fax number 713 622 1370 Web address http www BlueLance com COPYRIGHT 2002 Blue Lance Inc Blue Lance LT Auditor 8 and the Report Generator are registered trademarks of Blue Lance Inc Microsoft Windows 2000 Windows NT Windows Advanced Server SQL Server 2000 and SQL Server 7 0 are registered trademarks of Microsoft Corporation Novell and NetWare are registered trademarks of Novell Inc Intel and Pentium are registered trademarks of Intel Corporation Oracle Oracle8i and Net8 are registered trademarks of Oracle Corporation Pervasive and Btrieve are trademarks of Pervasive Software Inc Blue Lance shall not be held accountable for technical or editorial errors within this document This document is provided as is without warranty of any kind and is subject to change without notice Contents Chapter 1 Overview Report Generator PPP 1 Chapter 2 Installing the Report Generator aul m 1 BRE QUITCRICING sisene enie ean EE vesndunenanndene ustaces iasieead sidbteseiaannydesasetens measannevaane 1 Installing the Report Gemeratorsvisiciessstscosassscacedsascasass
19. OK 8 From the Operations tab click the Conditions tab to select more criteria for your query click Apply OK to save your query or click Run Report Important The Add Custom feature is not available in the Microsoft Exchange Logs and Extended File System Logs packages o Deleting Operations Perform the following steps to delete an operation from your query 1 From the Operations tab highlight the desired operation 2 Click Delete Click Yes to confirm the deletion The operation is removed from the report query Note If you delete a custom operation from the operation list the operation is permanently deleted 4 12 Using the Report Generator Conditions Tab Cross platform operating systemloo query wx B amp Daeatme Z ou options om BJ classes ES Propertiessattributes users iy Machines Cancel a Operations Performed On amp Operations d Conditions IV Successful gt All Errors Apply Bun Report Account Disabled Account Expired amp ccount Locked Account Restriction Bad Login Component Unselect All Help PEEK __ Bad Username Password Invalid Address No Access Privileges Report Output Read Only or File in Use Not Found Or Already Exists g Resource Error Data Source DALT Auditor 8 5XReportsXCross Platform S ample DB S ample xml a A condition is any action that occurs only if
20. Report LT Auditor 8 0 SP2 SQL Report Generator Options Tab Cross platform operating system log query x amp Operations 5 Conditions IL Classes Properties Attributes e Users B Operations Performed On Date amp Time amp Output it Cancel Description activity Report Grouped by User gt Iv Show Report Title Apply Title fut Auditor Reports Sub title Radar for Your Network r v Show Header Footer Header Lr Auditor Eooter fe Blue Lance Inc 2003 All Rights Reserved Bun Report Help HU Report Output Condense Reports Additional Arguments Data Source D LT Auditor 8 5 Reports Cross Platform S ample DESS ample xml s Perform the following steps to add specific details to your query which will be displayed in the report output 1 2 Enter a description that defines this query Check the Show Report Title box to display the title and subtitle on the report a Title Enter a title to display in the report b Subtitle Enter a subtitle to display in the report Check the Show Header Footer box to show a report header and footer in the report which will appear on each page of the report a Header Enter a header to display in the report b Footer Enter a footer to display in the report Using the Report Generator 4 Check the Condense Reports box to condense reports that contain large amounts of data and
21. S If you select a query from a group in the Cross Platform Operating System Microsoft Windows Logs or the Novell NetWare Logs package the preceding window displays This window consists of the following tabs Operations 4 Machines 7 Conditions a Events Performed On a Classes 1 Date amp Time O Properties Attributes 7 Output a Users 1 Options Operations Tab Using the Report Generator Use the Operations tab to identify the network operations to be used in your query An operation is an event that is audited by LT Auditor From the Operations tab select one of the following options o Including or Excluding Operations All Operations Includes all operations in your query Include Operations Displays operations that are generated by the event Exclude Operations Displays all records that do not match the operations you select Perform these steps to select certain operations to include or exclude in your query 1 2 Click Add to display the Add Operations window x Standard Operations File Delete File Execute Category Source Origin EverilD File File Window Window LT Auditor Processed Log 501 LT Auditor Processed Log 502 Take Ownership _ Set Permissions Fie Fie Window Window LT Auditor Processed Log 527 LT Auditor Processed Log 528 File Modify Create Object File Administration Window
22. Using the Report Generator Extended File System Log Report Query Window If you select a query from a group in the Extended File System Logs package the following window displays Extended file system log query g XI gt eS Fies Bg Date amp Time amp output f options All Operations Include Operations Cancel Exclude Operations Apply Select Description Event 1D File Accessed Create File Delete File File Directory Attribute Change File Directory Security Change Make Directory Remove Directory Rename Directory Rename File Write File pe e di Run Report Help Report Output 1 1 0 09 00 co no Select All Unselect Al Data Source D LT Auditor 8 5 Reports E tended File System S ample DB S ample xfs ES This window includes the following tabs Operations J Output a Files 1 Options 3 Date amp Time N Note For a detailed description of using the Operations Date amp Time Output and Options tabs refer to the section Cross Platform Operating System Log Query in this chapter LT Auditor v8 0 SP2 SQL Report Generator Files Tab xi amp Operations f H Date amp Time E Output 1i Options V Al Files Include Files Cancel Exclude Files Apply Run Report Help Report Output 1 Data Seurce D L T Auditor 8 5 Reports Extended File S
23. Y FRB Remove lt B1ALGMG MKT NY FRB BTALMMG MKT NY FRB BIALMSF SF NY FRB Add All gt gt B1AMAEP EP NY FRB BTAMDMG MKT NY FRB BTAPDDS AO EROC NY FRB BTARBMG MKT NY FRB Remove All lt lt B1ARGMG MKT NY FRB BTASMAD AL NY FRB BTASRMG MKT NY FRB BIAVPSF SF NY FRB Fa 4 BIAEKEP EP NY FRB blahmgs GSS EROC NY FRB BIAJGAD AU N Y FRB I Cancel Help Select a user name and click Add b Click OK to save your changes and display the Add a user window c Click OK to include the user name in your query and display the Users tab window 4 Click Delete to remove the selected user from the query 5 In the report query window click the Machines tab to select more criteria for your query click Apply OK to save your query or click Run Report 4 19 LT Auditor 8 0 SP2 SQL Report Generator Machines Tab Cross platform operating system log query x OperationsPertormedon BE Date a Time Z oup f Nar Operations 88 conditions BJ classes ES Propertiessattrinutes users 3 gt All Machines Include Selected Machines Options Cancel Apply Evclude Selected Machines e Bun Report di Help Report Output E Data Seurce D ALT Auditor 8 5 Reports Cross Platform S ample DB S ample xml ae Use the Machines tab to include certain network computers in your query This tab displays IP addresses MAC addresses and machine names Note A mach
24. ame for the new report group select the report group you just created and click the Modify button Enter a new name for your report group and press Enter LT Auditor 8 0 SP2 SQL Report Generator Deleting a Report Group Perform the following steps to delete a report group l From the Report Group window highlight the desired report group you want to delete To delete the report group use either of the following methods From the System menu click Delete From the Standard toolbar click the Delete button Click Yes to confirm the deletion of your report group Note Deleting a report group will also delete all queries associated with that group Using the Report Generator Report Queries Report Generator gathers and retrieves archived information from a SQL or Oracle database then generates a report based on the criteria that define the database query Report queries allow you to filter information concerning the network Report Generator ships with a variety of report queries that can be customized to fit specific criteria In addition to modifying existing report queries you can also create new queries for the report groups By default Report Generator provides several queries for each report group Modifying an Existing Report Query To modify an existing report query perform the following steps l From the left hand pane of the LT Auditor SQL Report Generator 8 0 SP2 window select one of the follo
25. asiadaussadaesesasnasessasdeoasvesessassaanaszasases 2 Chapter 3 Constructing a Database i ag M 1 Space Considerati nS assets osedoniivaltiadn ti dato aote tet clu x a aC S Eada LN T EESE EES 1 Constructing a SQL Database isi ciiasicusdadssinatcavesiecedvaanandedeanaded ssteadaaeansedd aanaves ote e eL opi UAR 2 Creating a Basic Bru E 3 Creating a Custom Database P p 6 Creating Tables Views Stored Procedures and Audit Triggers 10 Creating Tables Views and Stored Procedures for Exchange Logs 10 Creating Tables Views and Stored Procedures for Extended File System Logs 11 Assigning Permissions to the Database sess 12 Creating a Maintenance Plan for SOL Setvet a detener pierced erbe te IT iege M Ceu 15 Archiving the Database and Deleting Dudes eot teorie E Ext eC ee rra ber Ex eps 19 Creating a Flat Database P M 19 fe Fe ba 2g 2 92 ae nos EM mtem Po pM Ee eee 29 Constructing an Oracle Database iis Det ba pH PAR ERN EDEN PR D PYAN NI eee 33 Oraciesr Configuration IN ODES seesi seiere eesi Mine rU Map Rad cu mda PIN PR Qe Me Nes RN ud 33 Database and Instance Name S8U682 Gs tes rise pud teu x Euer Ho poi a PINE deb en esas bd deehun 33 Java C TTD octo uei exul E qe eed eus 33 Oracle Nets Configuration Notes 25d ERN Rp E M EUR NpU NUT Rag tnis 34 RU Oracle SOLIDIS
26. ation Use SQL Server authentication Username Password Ju Cancel Help 22 To schedule the package from the SQL Server Enterprise Manager window expand the Data Transformation Services folder select the local package you just saved and right click Click the Schedule button to schedule the package as a job 23 After the DTS package is saved and scheduled you can create a deletion job Constructing a Database Deleting Data To create a deletion job 1 Click Start Programs gt Microsoft SQL Server 7 0 Enterprise Manager 2 On the Console Root folder in the SQL Server Enterprise Manager window expand the Management folder Expand the SQL Server Agent Right click Jobs and select New Job SQL Server Enterprise Manager Console Window Help rosoft SQL Servers SQL Server Group BLSQLPROD Windows NT Manage action view Tos e gt lm ES ES 0 5k eB Gm Tree C Console Root JJ Microsoft SQL Servers E SQL Server Group E BLSQLPROD Windows NT E Databases Data Transformation Services E Management Alerts Operators Jobs Backup Current Activity 1 10 2001 1 21 43 PM Database Maintenance Plans E SQL Server Logs web Publishing 4 Security 5 Support Services BLSOQLSERVER Windows NT E Databases zd Data Transformation Services J Management Replication Monitor E Security 5 Suppor
27. ator LT Quattor SOL report generator YO SPZ BE Menit Eachargs Loge mH Eserded Fle Sytem Loos rl croi Windows Logs rs a Novel Note Loge The Report Generator is an application used to run reports on server data collected by LT Auditor on the servers Customizable reports query and export data to multiple formats Blue Lance offers several packages for LT Auditor 8 0 Service Pack SP 2 Depending on the license key purchased you might see some or all of the packages listed below These include a Cross Platform Operating System Logs Create reports based on audited data from Microsoft Windows and Novell NetWare logs 4 Microsoft Exchange Logs Beta Create reports based on audited data from Exchange logs O Extended File System Logs Create reports based on audited data from extended file system logs 4 Microsoft Windows Logs Create reports based on audited data from Windows logs O Novell NetWare Logs Create reports based on audited data from NetWare logs LT Auditor 8 0 SP2 SQL Report Generator Each package contains multiple query groups such as OO Oa 0 qo Exception reports File activity reports General reports Graphs Login activity reports Miscellaneous reports Oo m o o o NetWare NDS partition reports NetWare NDS reports NT Administrative reports Summary reports Windows Event Log reports A query groups consists of various report queries that allow yo
28. ave the new job step The following screen will display confirming that the deletion job has been created New Job Properties BLSQLPROD EE x General Steps Schedules Notifications ID StepName Type Onsuccess Onfaiure Delete Transact SQ Goto next step Quit with failure Move step Start step 0 Delete x i Insert Edit Delete OK Cancel Apply Help 8 Click the Schedules tab Click New and schedule the job to automatically run once a month or as needed Remember to schedule the job to run during idle times Click OK to exit New Job Schedule BLSQLPROD E xl Name Deletion schedule IV Enabled r Schedule Type Start automatically when SQL Server Agent starts C Start whenever the CPU s become idle C Ohne time Gn date Tue 1 3 2001 Attime 12 29 PM Recurring Occurs every 1 month s on the 1st Sunday of that month at 2 00 00 LT Auditor 8 0 SP2 SQL Report Generator 9 On the New Job Properties window click the Notifications tab Use this window to modify the way in which you are notified Click Apply OK New Job Properties BLSQLPROD Pl a gE zl EIE zl EC NE NN 10 From the SQL Server Enterprise Manager window tree section click Management SQL Server Agent Jobs In the right hand pane verify that the deletion job was created successfully Constructing a Database Constructing an Orac
29. ce Plan Wizard BLARCHANASRV X Welcome to the Database Maintenance Plan Wizard This wizard helps you create a maintenance plan that the SQL Server Agent can run on a regular basis With this wizard you can Run database integrity checks e Update database statistics Perform database backups Ship transaction logs to another server Enterprise Edition 2 The Select Databases window displays This window allows you to select single or multiple databases to manage Click These databases and select the database you wish to manage Click Next to continue Database Maintenance Plan Wizard BLARCHANASRY i X Select Databases Select the databases for which to create the maintenance plan C All databases All system databases master model and msdb Alluser databases all databases other than master model and msdb These databases Database WOM INN IM master model msdb E Ship the transaction logs to other SQL Servers log shipping cot oe Constructing a Database 3 The Update Data Optimization Information window displays Select Reorganize data and index pages Reorganize pages with the original amount of free space and Remove unused space from the database files Click Next to continue Database Maintenance Plan Wizard BLSQLPROD Update Data Optimization Information As data and index pages fi
30. cess an Oracle database or other service across the network you use a net service name This wizard will help you create a net service name Enter the name you wantto use to access the database or service It can be any name you choose Net Service Name Las Cancel Back Next gt 4 In the Net Service Name field add the name of the database created for LT Auditor Click Next to continue 5 The Protocol window displays Select TCP IP Internet Protocol Click Next to continue Net Service Name Wizard page 2 of 5 Protocol Xl To communicate with the database across a network a network protocol is used Selectthe protocol used for the database you wantto access TCP IP with SSL Secure Internet Protocol SPX Netvare Networking Named Pipes Microsoft Networking IPC Local Database e Cancel 4 Back Constructing a Database 6 The Protocol Settings window displays In the Host Name field enter the host name or the host IP where the database resides Click Next to continue Net Service Name Wizard page 3 of 5 Protocol Settings E x To communicate with the database using the TCP IP protocol the database computer s host name is required Enter the TCP IP host name forthe computer where the database is lacated Host Name 10 0 4 99 A TCP IP port number is also required The port number for Oracle databases is usually 1521 You should not normally need to specify a different p
31. e MSSQL SQL1 dsf v Server Type Microsoft SOL Server Add Hp Server Name Save Database Name Low Use NT Integrated Security Cancel Use specific usemame and password User Name Hel DR Help Password Test Connection If you selected Microsoft SQL Server for your database the preceding graphic will display Perform the following steps to ensure that you connect to the appropriate data source file This data source file will be used by the Report Generator to gather data for your report queries 1 2 In the Server Name field enter the SQL server name In the Database Name field enter the SQL server database name Select either Use NT Integrated Security or Use specific username and password If Use specific username and password is selected enter the user name and password in the designated fields Click the Test Connection button to verify that you can connect to the selected database Click Save OK OK to save your changes or Cancel to exit without saving At any time you can click the Add New button to return to the Add a new data source window LT Auditor 8 0 SP2 SQL Report Generator Oracle Datasource Information E xj Select a data source Oracle Oracle1 dsf Y Server Type Oracle Save Server Name m DK User Name Password Cae Help Test Connection If you selected Oracle for your database the preceding graphic will
32. elect the database created for LT Auditor c At the root of the LT Auditor CD click Database Scripts Microsoft SQL Server gt Create FlatDatabaseObjects d Click Execute Query to create the table views and deletion stored procedure 7 Use the Enterprise Manager to verify that the table views and deletion stored procedure was created Constructing a Database After the objects are created successfully if you are using SQL Server 7 0 display the Enterprise Manager right click Data Transformation Services select All tasks 9 Click Open Package and browse the LT Auditor CD for the dts package Click Open to display the SQL Server Enterprise Manager window 2 x Select File Look in a FLAT Database gt 8 ex E3 80 database to Flat database dts History Desktop A My Documents Loran My Computer rca ej File name eo database to flat database dts Open My Network P Files of type prs Files dts Cancel ZA 10 Double click the server icon farthest to the left to display its Connection Properties window and LT Auditor 8 0 SP2 SQL Report Generator 11 Modify the following informatio n Server name to reflect the server the database was created on Username and password Current database Click OK to return to the SQL Server Enterprise Manager window Connection Properties Microsoft OLE DB Provider for SQL Server amp Micro
33. enerator Thank you for choosing LT Auditor SOL Report Generator te Cancel InstallShield 12 The files are copied to the specified location and the InstallShield Wizard Complete window displays By default the Yes I want to restart my computer now option is selected Click Finish to complete the installation process InstallShield Wizard Aene InstallShield Wizard Complete The InstallShield Wizard has successfully installed LT Auditor SQL Report Generator Before you can use the program you must restart your computer No will restart my computer later Remove any disks from their drives and then click Finish to complete setup lt Back Cancel LT Auditor 8 0 SP2 SQL Report Generator Chapter 3 Constructing a Database Overview This chapter contains instructions on constructing a database using O Microsoft SQL Server 2000 and SQL Server 7 0 13 Oracle8i database products Space Considerations To optimize the performance of LT Auditor there must be sufficient storage space for the LT Auditor database The storage space required varies greatly depending on the O Number of servers on which LT Auditor is installed 3 Number of users per server O Policies set for auditing O Length of time the data will be stored Example If a company collects the equivalent of one million records 125 MB of space or more is required for the LT Auditor database As the n
34. erence Date LT Auditor 8 0 SP2 SQL Report Generator Example To run reports in scheduled mode such as daily reports modify the Date amp Time tab as follows 1 Select the Reference Date radio button This tells you from which date the calculation will be performed To use the current date a From the Change date of reference from today drop down menu select Minus b In the day field enter 0 Note 0 represents the current day Negative numbers represent days in the past Positive numbers represent days in the future c By default reports on all activities will be monitored from 12 00 00 A M to 11 59 59 P M Based on your reporting requirements select the Report on Log Date or Report on Inserted Date radio button O Use the Time option to select the Start Time and End Time for the report You can also run the report for either a specific block of time or a continuous stretch of time The following time options are available Start Time End Time Determines the starting and ending time for the report Continuous Stretch of Time Reports on all activities within the defined date time range Block of Time Reports on all activities within the defined date range which falls inside the block of time range Using the Report Generator O Select the Report on Log Date radio button for a report of activities captured at the specified log date and time The log date is the date and time when an event
35. ews and Stored Procedures for Extended File System Logs If you are auditing Extended File System logs you must create objects within that database To create the objects within the database 1 Click Start Programs Microsoft SQL Server Query Analyzer to display the SQL Server Query Analyzer window The Connect to SQL Server window displays Connect to the SQL Server where the database was created Click OK 2 From the Current Database drop down menu select the database created for LT Auditor 3 At the root of the LT Auditor CD click Database Scripts Microsoft SQL Server Objects Creation Script for File System 4 Click Execute Query to create the tables indexes and constraints 3 11 LT Auditor 8 0 SP2 SQL Report Generator Assigning Permissions to the Database To maintain the security of LT Auditor database it is necessary to assign the appropriate permission to the person consolidating the data and running the reports You can assign the permissions manually or you can use the Database Login Wizard to guide you through the process Assigning permissions manually allows users to configure server roles and database access for a specified user To assign permissions perform the following steps 1 Click Start Programs Microsoft SQL Server Enterprise Manager 2 Inthe Enterprise Manager window click Security Under Security right click Login On the drop down menu select New Login T
36. formations tab Verify that the Source table and the Destination table are identical Data Transformation Properties sd Source Destination Transformations Advanced Define the column mappings between the source and destination tables You may copy columns directly or use any one of the transformations available Source table Destination table Y v New transformation Copy Column New Selected transformation Copy Column Delete Cancel Help Constructing a Database 19 Click the Advanced tab In the SQL Server section select Use fast load and Keep Nulls Click OK to continue Click OK Data Transformation Properties LT Auditor 8 0 SP2 SQL Report Generator 20 From the Menu bar of the SQL Server Enterprise Manager window click the package and the Save As button to display the Save DTS Package window 21 Click the Location drop down arrow and select SQL Server Click the Use SQL Server authentication radio button and enter the username and password Click OK to save the package on the SQL Server Save DTS Package x D Save a DTS package to the server repository or a file Specify the package name and location Package name 20 database to flat database Owner password User password Location SOL Server g In order to save to Microsoft SOL Server Local you must provide the server name login and password Server local M C Use Windows NT authentic
37. g query Xj E Operations 3B Conditions A Classes g Properties Attributes e Users 5 Machines d Operations Performed On f Date amp Time Z Output i Options v All Entities Cone Include Selected Entitie Apply Bun Report Data Source DAL T Auditor 8 5 Reports Cross Platform S ample DB S ample xml An entity is an object on which you can perform an operation such as a file another user or machine By default the AU Entities option is checked Deselect All Entities to query the selected entities 1 Click Include Selected Entities to report on selected Operations Performed On entities or click Exclude Selected Entities to report all entities other than those listed in the Events Performed On tab 2 Deselect All Entities and click Add to open the Add Operation Performed on Entity window 3 In the Entity Name filed enter the name of the file user or machine you would like to query Click OK The newly added entity displays in the Events Performed On column 4 In the report query window click the Date amp Time tab to select more criteria for your query click Apply OK to save your query or click Run Report Date amp Time Tab amp Operations EB Conditions a Classes Properties Attributes e Users Bry Machines Using the Report Generator BS Operations Performed On Date amp Time E Output fit o
38. he SQL Server Login Properties New Login window displays 3 Select the General tab In the Name field enter the new user name Under Authentication select the SQL Server Authentication button Enter your SQL Server password SQL Server Login Properties New Login E xj General Server Roles Database Access qp 7 j Authentication C Windows Authentication Boman 7 SQL Server Authentication Password Specify the default language and database for this login Database LT AUDIT ta Language lt Default gt Defaults Cancel Help 3 12 Constructing a Database 4 Select the Database Access tab From this screen you can specify the permissions of the selected user Select the database to which you want to grant the user rights SQL Server Login Properties New Login EE xi General Server Roles Database Access Database access Specify which databases can be accessed by this login Permit Database User d BL Audit BL EN LT_AUDIT O LT FAT OE LT_FLatso D LT s 1f LT su d mee sr rea Database roles for LT_AUDIT Permit in database role public 1f db owner O ff db accessadmin 3 f db securityadmin 1f db ddladmin x Properties Cancel Hep 3 13 LT Auditor 8 0 SP2 SQL Report Generator 5 Click Properties Permissions to display the Database User Properties
39. ine can be a workstation fax or any other machine connected to the network 1 Deselect the All Machines box to query available computers in the network or deselect the box and click either Include Selected Machines or Exclude Selected Machines Using the Report Generator 2 Click Add to display the Add a machine window a Click the Browse button to select a computer The following window displays Select Machines x 172 17 124 141 172 17 126 129 172 17 124 144 172 17 126 84 172 17 124 146 172 17 126 119 172 17 124 167 172 17 124 178 172 17 124 193 172 7 124 194 Remove 172 17 124 195 imd 17217 124 202 172 17 126 113 Add All gt gt 172 17 126 116 Z 172 17 126 117 172 17 126 69 172 17 126 81 Remove All lt lt 172 17 126 86 172 17 126 88 172 17 126 92 172 17 126 96 bs 4 gt n Cancel Help b Selecta computer name and click Add OK to return to the Add a machine window c Click OK save your changes and display the Machines tab window 3 If you want to delete a machine from your query highlight the desired machine name located in the Machines tab window Click Delete The machine is removed from the list 4 In the report query window click the Operations Performed On tab to select more criteria for your query click Apply OK to save your query or click Run Report LT Auditor 8 0 SP2 SQL Report Generator Operations Performed On Tab Cross platform operating system lo
40. information Reports of major activities usually contain multiple activities performed on the operating system that are not essential for a report When reports are condensed some events are not shown Example When a user is created default attributes are set for that user This creates additional events in the database You can suppress these additional events by checking the Condense Reports option 5 Use the Additional Arguments option to specify additional arguments for the report Arguments can be specified to display reports with specific conditions LT Auditor 8 0 SP2 SQL Report Generator Microsoft Exchange Query Window Miscrosoft Exchange Query xj Ya Operations x Iv All Senders nclude Senders Exclude Senders ender Name e Recipient List Subject List DateTime amp Cancel ly App Run Report dide Help Report Output Data Source D LT Auditor 8 5 Reports Exchange Sample DB S ample xch 4 If you select a query from a group in the Microsoft Log Report Query package the preceding window displays This window consists of the following tabs o m m m Operations Hd Date amp Time Sender List Output Recipient List Options Subject List Note For a detailed description of using the Operations Date amp Time Output and Options tabs refer to the section Cross Platform Operating System Log Query in this chapter Using the Repor
41. le Database LT Auditor for Windows is designed to work with Oracle 8 8 1 5 8 1 6 and 8 1 7 databases and later Before installing Oracle if not already installed or setting up an Oracle database for LT Auditor you or your database administrator should consider reviewing the following information O Oracle8i Configuration Notes O Oracle Net8 Configuration Notes O Oracle Database Setup for LT Auditor Oracle8i Configuration Notes In Oracle8i the initialization parameter file is referred to as INIT ORA The file is placed in ORACLE HOME in ADMIN SID PFILE For example if ORACLE HOME is D Oracle Ora8i the Init ora file will be located in the DAOracle Ora8iadmin SID pfile directory where SID is the instance name related to the database Database and Instance Name Issues The Db_name cannot be changed after it is set The Service_Name is set in the Init ora file and corresponds to Db_name Domain For example if the Db_name is Ltap and the domain is BlueLance the Service_Name will be Ltap BlueLance com Oracle refers to the Service Name as the Global Database Name The Instance_Name is set in the Init Ora file and instance name which refers to the name of the Oracle database The Instance_Name parameter links the database being started to the instance created The Service_Name and Instance_Name are required when setting up Net8 Java Option If the Java Option is not installed make sure that the Java pool size is set t
42. lect Write report to a text file in directory Click Next Next Finish to complete the Database Maintenance Plan Wizard Database Maintenance Plan Wizard BLARCHANASRV mg X Reports to Generate Specify the directory in which to store the reports generated by the maintenance plan i C Program Files Microsoft SQL Se Delete text report files older than E W eek s F Send e mail report to operator New Operator lt Back Cancel Help 3 18 Constructing a Database Archiving the Database and Deleting Data To improve the performance of the current database data needs to be archived to an Archive database and deleted from the current database Perform the following steps to create a Flat database which includes one file group one table and requires more disk space than the current database Creating a Flat Database Display the Enterprise Manager and perform the following steps 1 Create a database containing only the Primary file group LT_FLAT8O Properties E x General Transaction Log Options Permissions cgi Name LT FLAT8O Database files Space Allocated MB File group LT_FLATSO_ F LT_FLATS0_Data M RM PRIMARY File properties Vv Automatically grow file r File growth Maximum file size C n megabytes E Unrestricted filegrowth By percent fio C Restrict filegrowth MB 16107 Cancel Apply Help
43. ll updating requires more time Reorganize your data and index pages to improve performance v Reorganize data and index pages Reorganize pages with the original amount of free space C Change free space per page percentage to 0 4 Update d by query optimizer sample 10 I of the database When it grows beyond 50 MB Amount of free space to remain after shrink 10 of the data space Schedule Occurs every 1 week s on Sunday at 1 00 00 AM a xli Change cme ee 4 The Database Integrity Check window displays Select Check database integrity Click Change to display the Edit Recurring Job Schedule Modify window schedule the integrity check and click OK Click Next to continue Database Maintenance Plan Wizard BLARCHANASRY E xi Database Integrity Check Check database integrity to detect inconsistencies caused by hardware or software errors v Check database integrity Include indexes Attempt to repair any minor problems Exclude indexes Perform these checks before doing backups Schedule Occurs every 1 week s on Sunday at 12 00 00 AM zi Change coct_ e 3 17 LT Auditor 8 0 SP2 SQL Report Generator 5 Backups can be scheduled through the Maintenance Plan Wizard or they can be set up as a separate job Click Next Next to continue to identify the directory to store the reports generated 6 When the Reports to Generate window displays se
44. luded in LT Auditor 8 0 SP2 SQL Report Generator is XML reporting This feature allows a user to directly run a report on an XML based log file Use this option when a report needs to be generated on a specific file The following packages can report on XML logs with the xml extension O Cross Platform Operating System logs O Microsoft Windows logs O Novell NetWare logs The Microsoft Exchange logs Beta package can report on XML files with an xch extension The Extended File System Logs package can report on XML files with an xfs extension To run a report on an xml log file select the appropriate XML file as the data source for that query LT Auditor 8 0 SP2 SQL Report Generator Additional Features and Modifications The following features have been added to the LT Auditor SQL Report Generator O The data source window allows you to test the connection to an Oracle or a SQL server database This feature prevents errors that may occur from invalid or erroneous connection settings O The License key can be changed from the Report Generator window by clicking Help About LT Auditor Report Generator License For further information on license keys contact the Blue Lance Support team at 713 680 1187 or the Blue Lance website at http www bluelance com The following modification has been made to the LT Auditor SQL Report Generator O Copying and pasting queries across different packages is not allowed If you a
45. n the Database Scripts Microsoft SQL Server directory Click Open Constructing a Database 7 The default path for the database files is C program files Microsoft SQL Server mssql data Refer to the Space Considerations section in this chapter before making any modifications to the path and the size of the database Verify on the Messages tab that the database has been created N Note The default path CAprogram files Microsoft SQL Server mssq data is specific to SQL Server 2000 Modify this path based on your business and technical requirements create LTA f n File Edit Query Tools Window Help 84 xl e san teram loca cea Object Browser x Ej blsalprod sa NAME LT AUDIT FILENAME c program files Microsoft SQL Seen SIZE 100 MAXSIZE 200 FILEGROWTH 10 FILEGROUP SECONDARY eCOOOOoooOoo Northwind CREATE DATABASE process is allocating 100 00 MB on c4 PERFECT TRAE The CREATE DATABASE process is allocating 100 00 MB onc pubs The CREATE DATABASE process is allocating 100 00 MB onc ae The CREATE DATABASE process is allocating 80 00 MB on d Common Objects C Configuration Fur C Cursor Functions V A A Da Ge E E E E E E 8 9 CI E Grids si Messages Query batch comple lblsaiprod 7 0 sa 6 LT AUDIT 0 00 00 o rows ln 3 Col 3 S Objects Connections 1 4 8 After the database is created if you are using SQL 2000 you must change the Recove
46. o 1 MB If the Java pool size is not set to 1 MB it defaults to 20 MB The Java pool is an area in the System Global Area SGA that holds the Java libraries and classes If the Java Option is installed make sure that the Java pool size is set to 20 MB and the Shared pool size is set to 50 MB The Oracle instance created will use the initialization parameter file that is placed in the DAOracle Ora8i Database folder The file name is init lt SID gt ora and is used by the Windows 2000 Windows NT service related to the instance This file contains only one line that points to the Init ora file The password file is located in the DXOracle Ora8iMDatabase folder LT Auditor 8 0 SP2 SQL Report Generator Oracle Net8 Configuration Notes Oracle Configuration files are located in the Oracle_home Network Admin folder The Listener ora and Tnsnames ora files require the following parameters O Listener ora Global Dbname The Service name used in the Init ora file Sid Name The Instance Name used in the Init ora file O Tnsnames ora The Service Name used in the Tnsnames ora file Running Oracle Scripts Before you run Lt Auditor Oracle scripts perform the following steps l 2 3 From the LT Auditor CD copy and paste the Oracle scripts to a local folder Right click each script and select Properties Deselect the Read Only attribute Determine your Oracle home folder For example Blue Lance s home folder i
47. ort number Port Number it 521 Cancel lt Back 7 The Service window displays Select the Oracle 81 Service Name radio button In the Service name field enter the name of the database Click Next to continue Net Service Name Wizard page 4 of 5 Service E x To identify the database or service you must provide either its service name for Oracle8i or system identifer SID for Oracle8 or previous database versions The service name for an Oracle8i database is normally its global database name OracleBi Service Name LTAS Oracle8 or Previous SID ORCL J Optionally you can choose if you want a shared or dedicated Oracle8i database connection The default is to letthe database decide Oracle8i Connection Type Database Default Y Cancel lt Back 8 The Test window displays Click Test to verify your connection to the database You will be prompted to enter the user name and password of your Oracle database Otherwise click Finish to complete the registration process Oracle will place this entry in the TNSNames ora file 9 Return to the Net8 Assistant Home page and click File Save Network Configuration to save all changes LT Auditor 8 0 SP2 SQL Report Generator LT Auditor 8 0 SP2 SQL Report Generator Chapter 4 Using the Report Generator Overview You can customize the Report Generator query function to retrieve audited data from the LT Auditor database and genera
48. our user name company name and key If you are installing a trial version of the Report Generator enter Trial in the Key field Click Next to display the Choose Destination Location window InstallShield Wizard i x Customer Information Please enter your information InstallShield Please enter your name the name of the company for whom you work and the product key Please enter TRIAL as the key if you are installing a free trial version User Name Monica Hamilton Company Name Blue Lance Inc Key TRIAL lt Back Cancel Installing the Report Generator 7 If you entered Trial in the key field the LT Auditor SQL Report Generator Free Trial window will display Click Next to accept the terms and conditions of this trial installation LT Auditor SQL Report Generator Free Trial Please read the following terms about installing Free Trial Copy of LT Auditor Report Generator FREE TRIAL COPY Not for Resale This fully functional unrestricted copy of LT Auditor SOL Report Generator is solely for your evaluation purposes This FREE TRIAL COPY of LT Auditor SOL Report Generator may be installed onas many machines as you wish Within 30 days of such installation please contact Blue Lance or your reseller to purchase the appropriate licenses LT Auditor gives you the tools to unobtrusively monitor your networks to prevent THEFT by privileged and gt InstallShield
49. ption Data Pump Task undefined Connection Microsoft OLE DB Provider for SOL Server C Table View LT AUDIT dbo DIM Attribute SQL query DIM OBjectReference2 N objectlD DIM Object2N ObjectlD LEFT DIM Class DIM Class2 ON DIM_Object2 N_ClassID DIM Class2N ClasslD LEFT OUTER JOI DIM Attribute DIM Attribute2 ON DIM OBjectReference2 N AttributelD DIM_Attribute2 N_AttributelD where DIM date dt date lt dateadd dav 80 getdate rer ed af Parameters Preview Build Query Browse Parse Query 16 In the SQL query list box the number 80 represents 80 days prior to today Therefore data that is older than 80 days will be archived This number can be changed based on the your needs Constructing a Database 17 Click the Destination tab In the Table name field verify that the database name and table name are correct Data Transformation Properties 1 xd Source Destination Transformations Advanced d Store the results for this transformation Connection Microsoft OLE DB Provider for SOL Server 2 Table name LT FLATSO dbo FLAT Report ld Create New Name Type SES Nullabiity Size Precision f Scale varchar varchar varchar Event int Error int LogDate datetime UTCDate datetime LogTime varchar 3 UTCTime varchar 30 User varchar 254 x Cancel Help LT Auditor 8 0 SP2 SQL Report Generator 18 Click the Trans
50. ptions Select Date C Reference Date Change date of reference 1 Start Date End Date Ronee Minus J fo days Dec 26 2002 v From the date of reference o days report on the i T Ime AM PM Start Time End Time P1227 4 B B 10 12 2 4 Bs a SANN A TE T mer 12 00 00 AM mmiddiyy 8 00 am Continuous Stretch of Time to End Block of Time mimniddiyy 5 00 pm Report on Log Date Use Time Zone Specific Reporting Report on Inserted Date As of today this query selects activities from Any Date Any Time to Any Date Any Time Data Source D LT Auditor 8 5XReportsXCross Platform S ample DB Sample xml xl Cancel Report y Use this tab to specify a date and time range for the data to be included in the report On the Date amp Time tab you have the following options which you can access by clicking the radio button above the desired option O Use the Select Date option to set a specific start date and end date to run a report To run this same report for a different set of dates you must enter new dates in the Start Date and End Date fields O Use the Reference Date option to run reports based on their relationship to the current date Because the system automatically updates the current date you can set the report query to run many times on different dates Each time the report runs the Start Date and End Date will recalculate based on the Ref
51. rrent settings By default the Timeout field is 60000 and is measured in milliseconds LT Auditor 8 0 SP2 SQL Report Generator Appendix A Additional Features and Modifications This chapter provides a list of additions and changes that were made to the LT Auditor 8 0 SQL Report Generator Packages The report groups and queries in the LT Auditor 8 0 SP2 Report Generator are contained within the following packages O Cross Platform Operating System Logs Contains all of the default groups and queries shipped with LT Auditor 8 0 SP2 SQL Report Generator This package can be used to query both Windows and Novell NetWare logs 3 Microsoft Exchange Logs Beta new Used to run reports on Microsoft Exchange 5 5 and Microsoft Exchange 2000 Logs O Extended File System Logs new Used to query log data collected from file system activity The Extended File System log monitors files in the NTFS or FAT Windows File system This package includes operations not picked up by the Windows Event Log such as File Accessed Make Directory and Remove Directory o Microsoft Windows Logs new Used to report on Microsoft Windows logs exclusively This package is useful when only Microsoft Windows operating system logs need to be audited o Novell NetWare Logs new Used to report on NetWare logs exclusively This package is useful when only Novell NetWare logs need to be audited XML Reporting A new and exciting feature inc
52. ry Xi By Operations Performed on BE Date a time output Options XX Operations 3B Conditions a Classes E All Attributes C Selected Attributes Add Attribute Delete Attribute Add value Data Source D LT Auditor 8 5XReportsXCross Platform S ample DB S ample xml Apply Bun Report Help lh Report Output Properties or attributes indicate one or more characteristics of an object Example Attributes of a user include e Full name e Password e Member of Attributes of a group include e Descriptions e Members 4 16 Using the Report Generator Use the Properties Attributes tab to add specific properties and attributes to your query All Attributes Queries for all attributes Selected Attributes Adds specific attributes to your query Add Attribute Adds specific attributes to include in your report Delete Attribute Deletes specific attributes from the list Add Value Adds a new attribute value for the selected attribute 2 O OF OF O QO Delete Value Deletes the selected attribute values from the list Perform the following steps to add an attribute 1 Click the Selected Attributes radio button 2 Click Add Attribute 3 Enter the attribute name and click OK The Properties Attributes tab displays 4 In the report query window click the Users tab to select more criteria for your query click Apply OK to
53. ry model to Simple from the Options tab If you are using SQL Server 7 0 from the Options tab under Settings check the Truncate log on checkpoint check box Important o You must click the Execute Query button located on the Standard toolbar to save changes LT Auditor 8 0 SP2 SQL Report Generator Creating a Custom Database To create a custom database perform the following steps On your computer desktop click Start Programs Microsoft SQL Server Enterprise Manager 2 Select the server on which the new database will be created 3 From the Action menu select New Database 4 In the Database Properties window select the General tab In the name field enter LT AUDIT Database Properties LT AUDIT Server default oc cm nee Constructing a Database 5 Select the Data Files tab Under File Name enter LT AUDIT Data Database Properties LT AUDIT xj General Data Files Transaction Log Database files in size MB LT AUDIT Data C mssql dataSLT_AU Xm AY Delete File properties v Automatically grow file m File growth Maximum file size C In megabytes z Unrestricted file arowth By percent fio E C Restrict file growth MB 2 Cancel Help 6 Keep the default location or specify a different location where you want the database to reside If you want to change the location of the database click the Location button
54. s C Oracle Ora8i Determine where you want to create the new files For example Blue Lance s home folder is C Oracle Blue Lance uses the following Oracle Database SID LTAS In the following scripts change the C to the clients directory and replace all references of CXOracle to OracleDataPath TASRun SQL LTASRun1 SQL NITLTAS ora Setup an entry in the Tnsnames ora file for the LTAS database N Note You can customize the size of the database in the following scripts LTASRun SQL L TASRunl SQL Constructing a Database Setting Up an Entry to the Tnsnames ora File Using Net8 Assistant You can use Net8 Assistant to register the Oracle database and create an entry in the Tnsnames ora file N Note Only database administrators who are familiar with Oracle should modify the Tnsames ora file To use Net8 Assistant to register the Oracle database and create an entry in the Tnsnames ora file perform the following steps 1 From Programs Oracle Network Administrator Net 8 Assistant display the Net 8 Assistant The following window displays Nel Assistant D VORA DEMN NET WORK ADMIN Elle Edit mmand Help ene Connguration m Local Profile Linen nto p Listeners Oracle Names Sewers LT Auditor 8 0 SP2 SQL Report Generator 2 From the Net8 Configuration tree expand Local folder and select the Service Naming folder 3 Click the plus icon to display the following window To ac
55. seite a U IDA nM iN IURI ge ennai eases 34 Setting Up an Entry to the Tnsnames ora File Using Net8 Assistant 35 Chapter 4 Using the Report Generator o uu 1 Using The Report Generator iocos en Em r DIU PII D pA t ID Nu DM NI FREU MM I MM 1 Adding a New ELE OUT CS MT 2 Microsoft SOL SECO ausi Sassnaanninlcndas Subsuardesthcd acadsinancivessss dye tumsdpseadencaieniantsteanaceles 3 Oracle sea 4 Adding New Report Group asdsiemasexadep vive tb ov ba at hen ORE C EYED a e soi da ovv y Qs en PRU aE 3 Del ting a Report tan 6 rss erm MITTUNT TEM 7 Modifying an Existing Report Query iii eiu uisespice tait et era tentea npo aspere tk aUbi tank Ui auE 7 Creating a New Report UGE T 39 Deleting a Report DUSD es deenetie dites deste teneretur deseen oed Mas P OM Rd ss raens Re iR itd 40 Copying and Pasting CIUGEIGS cssasecngedinetidd debita ur tX ar past ibesr Ad ES e pique p PR P EHE 40 schedulme BeDOIUS ukostenstenguuktieDNURFSHEDH FR DUHD FS FEE AEE EE E EK Led UR EEEE 41 Additional FUNCIONS ressens yet seec dares Sieesei seasalucgonetleniaiGaneoniedvasnereteiseaet eased 42 Emal SENES eos todas eot uS Mutua eam een Teen 42 Appendix Appendix A Additional Features and Modifications ii LT Auditor 8 0 SP2 SQL Report Generator Chapter 1 Overview Report Gener
56. soft OLE DB Provider for SQL Server BLSOLPROD NN Constructing a Database 12 Double click the server icon farthest to the right to display its Connection Properties window 13 In the Connection Properties window modify the following information Server name to reflect the server at the client site Username and password Archive database Click OK to return to the SQL Server Enterprise Manager window Connection Properties al x General Specify an existing connection or define a new connection to the data source C New connection quce E Microsoft OLE DB Provider for SQL Server2 v Data source amp j Microsoft OLE DB Provider for SQL Server g In order to connect to Microsoft SQL Server you must specify the server username and password Server BLSQLPROD C Use Windows NT authentication Use SOL Server authentication Username sa Password pee Database E LT FLAT80 Refresh Advanced Cancel Help LT Auditor 8 0 SP2 SQL Report Generator 14 Right click the arrow located between the two server icons and select Properties The Transform Data Task Properties window displays 15 In the SQL query field use the down arrow to scroll to the end of the list box Transform Data Task Properties E Source Destination Transformations Lookups Options d Enter a table name or the results of a query as a data source Descri
57. t Generator Sender List Tab Miscrosoft Exchange Query D ALT Auditor 8 5 Reports Exchange Sample DB Sample xch Select the Sender List tab to query specific users l Check the All Senders box to query all users within the network or deselect the box to query selected users Click Include Senders to report on selected users or click Exclude Senders to report all users other than those selected in the Sender List tab Click Add to add a specific user to the query and to display the Add Sender name window Add Sender name LT Auditor 8 0 SP2 SQL Report Generator 4 Enter the name of the user you want to include in your query or click the Browse button If you enter the user name you must use the full syntax For Windows NT enter domain username For NetWare enter username context Select the desired user from the list provided If you click Browse the following window will display Browse for Senders E x eorgeanna hoiseth cityothouston net O CTREC DOU CTRECMAIL CN RECI LTAuditor Add gt Remove lt Add All gt gt PEE Remove All lt lt x e 5 Select a user name and click Add Click OK to save your changes and display the Add Sender name window 6 Click OK to include the user name in your query and display the Sender List tab window 7 Click Delete to remove the selected user from the query 8 In the report query window click the Recipient List tab to select
58. t Package Generates reports from Extended File System log files Microsoft Exchange Report Package Generates reports from Microsoft Exchange log files InstallShield Wizard 3 XI Select Components Choose the components Setup will install Select the components you want to install and clear the components you do not want to install m Description Cross Platform Report Package Novell Netware Report Package This component is required to MS Windows Report Package generate reports from Cross Platfrom Log files Extended File System Report Package Microsoft Exchange Report Package K K K K K Space Required on C 65140 K Space Available on C 15794236 K InstallShield lt Back Cancel To deselect a package click the check box located to the left of the package you do not want to install Click Next LT Auditor 8 0 SP2 SQL Report Generator 11 The Start Copying Files window displays the setup information for your Report Generator files Click Next InstallShield Wizard Start Copying Files Review settings before copying files Setup has enough information to start copying the program files If you want to review or change any settings click Back If you are satisfied with the settings click Next to begin copying files Current Settings User Monica Hamilton Company Blue Lance Inc Target Directory C Program Files Blue Lance Inc LT Auditor SOL Report G
59. t Services E SUSHMA WS Windows NT LT Auditor 8 0 SP2 SQL Report Generator 3 From the General tab in the New Properties window enter a name and description for your job New Job Properties BLSQLPROD General Steps Schedules Notifications Name Deletion Job Source local Created Not yet created v Enabled Target local server 2 Uncategorized Loca NN j C Target multiple servers Owner BsatPRODwshsbh x Description Delete old data from the tables in LT AUDIT database Last modified Not applicable 4 Select the Steps tab and click New New Job Step BLSQLPROD xj General Advanced Step name Deletion Type Transact SQL Script TSQL Database LT AUDIT Command Exec usp DeleteL TAT ables 30 Goto Step Mex _Brevious OK Cancel Apply Help 5 At the New Job Step screen enter a name for your new job step Click the Type drop down arrow From the drop down menu select Transact SQL Script TSQL 6 Click the Database drop down arrow From the drop down menu select the database from which you want to delete the data Constructing a Database 7 In the Command section enter the following information EXEC usp DeleteL TATables 30 N Note The number 30 allows you to delete everything that is older than 30 days You can customize the command by replacing the number 30 Click OK to s
60. te a report based on your criteria These criteria can include specific events users error conditions machines and operations Using the Report Generator S07 Auriitor SOL report generator YAD SPZ e este Options Heb l Ou Vex Fe Hy Meret Eschenge Looe S Extended Fie System Log E Hi Meot Windows Loge mM Novel Netware Loo NT Sonne rsten Reports Sumner Pleno Window Event LooRepats To display the Report Generator window click Start Programs LT Auditor LT Auditor Report Generators LT Auditor SQL Report Generator LT Auditor 8 0 SP2 SQL Report Generator Adding a New Data Source Add a new data source xj Select a database format Enter a name for the new data source Before you can create a report query you must select the desired database connection for the report The Add a new data source window can be accessed using either of the following methods O From the Options menu select Database Connection Information 73 From the Standard toolbar select the Database Connection Information button From the Select a database format section use the drop down arrow to select a Microsoft SQL Server or an Oracle database In the Enter a name for the new data source field enter a name for your database Click OK to display the Datasource Information window Using the Report Generator Microsoft SQL Server Ix Datasource Information j Select a data sourc
61. the following license agreement carefully Press the PAGE DOWN key to see the rest of the agreement LT Auditor General Software License Agreement READ THIS LICENSE AGREEMENT CAREFULLY BY INSTALLING OR USING THIS PRODUCT OR FAILING TO RETURN THE SOFTWARE DEFINED BELOW WITHIN TEN 10 DAYS PURSUANT TO THE PROVISIONS OF THE IMMEDIATELY SUCCEEDING PARAGRAPH YOU ARE CONSENTING TO BE BOUND BY AND ARE BECOMING 4 PARTY TO THIS AGREEMENT If you do not accept these terms and conditions you must return this Software within ten 10 days together with proof of payment to the place of purchase You will receive a full gt Do you accept all the terms of the preceding License Agreement If you choose No the setup will close To install LT Auditor SQL Report Generator you must accept this agreement InstallShield lt Back LT Auditor 8 0 SP2 SQL Report Generator 5 The Information window displays the Blue Lance contact information Review the information then click Next to display the Customer Information windo w InstallShield Wizard xj Information Please read the following text InstallShield BLUE LANCE INC COMPUTER SECURITY SOFTWARE LT Auditor SQL Report Generator Blue Lance Inc 1700 West Loop South Suite 1100 Houston TX 77027 Phone 713 680 1187 800 856 BLUE 2583 Fax 713 622 1370 Web www bluelance com Email sales sales bluelance com X gt 6 Enter y
62. this process To access the Enterprise Manager window select Start Programs gt Microsoft SQL Server Enterprise Manager Oo Restore the database periodically from the backup to a hard drive or a test database to ensure the validity of the backup O Create a maintenance plan with the Enterprise Manager and the Maintenance Wizard Because the insertion process is longer when the data and index pages are full reorganizing the pages for maximum efficiency improves the database performance A good maintenance plan will have O A database integrity check and index rebuilding The Integrity Check window allows you to include exclude and modify indexes The Index Rebuilding window enhances performance by deleting an index and creating a new index O Consistency checks of the data and data pages to ensure there is no data corruption O File compression by removing empty database pages The following steps provide a basic approach to creating a database maintenance plan For detailed instructions consult SQL Server help online at http www microsoft com 3 15 LT Auditor 8 0 SP2 SQL Report Generator 3 16 To create a maintenance plan using SQL Server perform the following steps From the SQL Server Enterprise Manager tree under Management right click Database Maintenance Plans and select New Maintenance Plan The Database Maintenance Plan Wizard window displays Click Next to continue Database Maintenan
63. time reporting requires substantial computer and human resources Real time reporting can be scheduled for off peak business periods which frees human and computer resources during peak business hours increasing productivity To add scheduled jobs 1 Select a report group 2 From the System menu select New Scheduled Report to display the Report Schedule Job window 3 Enter the necessary information into each field a Start Date Date when the job should mature for implementation b Start Time Time when the job should mature for implementation c Frequency Frequency of this job d Job Description A simple text description for this job This field is optional e Query Hile to Use The data source file to use while generating the report LT Auditor v8 0 SP2 SQL Report Generator Additional Functions Report Generator contains additional functions that will help you use the product efficiently Email Settings xl amp 3 Email Settings DK Server 0 0 1 242 Cancel Port 25 kde Help User Name Testu ser Password didi Timeout ms feo Use the Email Settings window to ensure that the SMTP parameters are properly configured so that your reports can be delivered using the e mail option 1 From the Options menu click E mail Settings to display the Email Settings window 2 Enter the name or IP address of the SMTP server used within the organization The port field includes your cu
64. ttempt to perform this action a warning message will display
65. u to generate a report You can also create your own groups and custom report queries Each report can be viewed using the following formats o o Crystal Reports Data Interchange Format dif Web page html Portable Document Format pdf Report Definition format Record format o o YM O l d Rich text format rtf Comma separated descriptions Text format txt Lotus 1 2 3 format Microsoft Word for Windows Microsoft Excel for Windows LT Auditor 8 0 SP2 SQL Report Generator Chapter 2 Installing the Report Generator Overview The Report Generator uses the Crystal Report engine to generate reports which provides features such as exporting to multiple data formats For example a user can export data to HTML format allowing the reports to be viewed using an Internet browser Using a built in scheduler the Report Generator can run reports without user interaction Scheduled reports reduce administrative overhead and lower ownership costs Requirements The minimum requirements for installing the Report Generator include o Hardware Intel Pentium processor 166 MHz or faster 128 MB RAM 100 MB available disk space does not include requirements for the database O Software One of the following Microsoft operating systems e Windows NT with SP6 and Microsoft Internet Explorer 5 e Windows 2000 with SP2 User rights to the registry located in the following directory HKEY LOCAL MAC
66. umber of logs collected increases the size of the database will also increase You can determine the hard drive space required for the LT Auditor database according to the amount of audit data you collect LT Auditor 8 0 SP2 SQL Report Generator Constructing a SQL Database LT Auditor for Windows is designed to work with SQL Server 2000 SQL Server 7 0 databases Before constructing a database you must install SQL Server using the following default options O Code page 1252 O Dictionary order case insensitive N Note Code pages and sort orders other than the default are not currently supported and can cause unexpected results Any computer with SQL Server 2000 or SQL Server 7 0 properly installed should be satisfactory for the creation of the LT Auditor database For requirements to install SQL Server refer to the Microsoft website at http www microsoft com Using SQL Server 2000 and SQL Server 7 0 you can create two types of databases O Basic O Custom N Note The following sections contain screen captures from SQL Server 2000 Constructing a Database Creating a Basic Database To create a basic database perform the following steps On your computer desktop click Start Programs Microsoft SQL Server Query Analyzer to display the Connect to SQL Server window ag SQL Server bleglprod x Start SOL Server if stopped Connection Information f Use Windows MT authentication
67. utput tab to specify how and where your report is displayed 1 Click the drop down arrow in the Report Type field to select a report type This list displays all possible report types including detailed reports summary reports and graphs 2 Select a report output by clicking the desired radio button Show Report On Screen Displays the report to screen Send Report To Printer Generates the report directly to the default printer Save Report On File Exports the report to a file or to another disk media E Mail Sends an exported report to SMTP e mail address Note Ensure that SMTP parameters are set properly for delivery of mail See the SMTP options section on the LT Auditor Console 3 Enter a file name to specify a destination for the report file This is required when saving reports to a file or when e mailing reports Using the Report Generator 4 Click the drop down arrow to select a format for the report The list contains possible export formats Selecting an export format is required when saving reports to a file or when e mailing reports 5 Designate an e mail address where the report will be sent by entering the address into the To and the optional CC field Ensure that the correct e mail address has been entered because Report Generator does not validate this information 6 Click the Options tab to select more criteria for your query click Apply gt OK to save your query or click Run
68. wing packages Cross Platform Operating System Logs Microsoft Exchange Logs Beta Extended File System Logs Microsoft Windows Logs Novell NetWare Logs package Highlight the desired report group to display all report queries that are part of the selected group Highlight the desired report query To display the report query window use any of the following methods From the System menu click Modify From the Standard toolbar click Modify Select a tab to customize the criteria for your query Click Apply OK to save your query or click Run Report Run Report is the physical act of running a query to retrieve an output Report Output is the output type selected such as doc and txt Note At any time during the report query process you can choose to save the query cancel the process apply or run a report You do not have to use all the tabs in order to form a query LT Auditor 8 0 SP2 SQL Report Generator Cross Platform Operating System Log Query Window xl Bs Operations Performed On Date amp Time amp Output 1 Options Nur Operations 3B Conditions n Classes Properties Attributes i users g Machines Cancel Apply Exclude Operations Description Category Source Origin Eventin Add Add Custom Delete Bun Report Help did Data Source DALT Auditor 8 5 Reports Cross Platform S ample DB S ample xml
69. ype selected such as doc and txt 4 10 Using the Report Generator Creating Custom Operations Cross platform operating system log custom event xj Custom Operation Description Cancel Origin LT Auditor Processed Log Help ov All Sources Source L rv All Categories Category cv AllEvent IDs OK did Event ID Using the Custom Operation feature you can search for specific sources categories and event IDs The information for each of the custom operation fields except origin can be found in the event logs Perform the following steps to add a custom operation to your standard operations list 1 From the Operations tab window deselect the All Events check box 2 Click Add Custom to display the Custom Operation window 2 Click Add to open the Cross platform operating system log custom event window 3 Enter a description for the operation 4 Use the Origin drop down menu to select an event log 4 11 LT Auditor 8 0 SP2 SQL Report Generator 5 In the remaining three fields Source Category and Event ID either leave all the boxes checked or enter a description for the fields N Note At least one of the three fields needs to be populated in order for the custom operation feature to work 6 Click OK to save the new operation 7 From the Add Custom Operations window select the newly created custom operation and click
70. ystem S ample DB S ample xfs ne Using the Files tab you can query specific files By default the AJ Files check box is select on all new report queries To modify the Files tab perform the following steps 1 Deselect the Files check box Select Include Files to query all files If you do not want to query files select Exclude Files 2 To include or exclude a specific file click Add The Add File window displays Add File Add File Cancel Help 3 Enter the file name including its extension For example you can query test chm Click OK The newly added file displays in the File Name column Using the Report Generator Creating a New Report Query Perform the following steps to add a new query to the desired report group 1 2 Select the report group for which you would like to add a new query To display the Report Query window use any of the following methods From the System menu click New gt Report Query From the Standard toolbar click the New Report Query button Press Ctrl Q The report query window includes multiple tabs Select a tab and modify the information according to your requirements Select the desired LT Auditor data source to be used for this report query Click the Options tab and enter a description for this query Click Apply OK to save the query to the selected report group folder and display the report query LT Auditor v8 0 SP2 SQL Report Generator

LT Auditor+ 8.0 SP2 SQL Report Generator User Guide

Contents

Download Pdf Manuals

Related Search

Related Contents