CSA Agent Start / Stop Service Logging - v5.2

Hello,
Is there a way for the CSA MC v5.2 to log and audit CSA agent clients when the agent service is manually stop or restart. Thanks,

You can monitor a service or see Security levels other than medium on the summary screen, but the Agent Service Control rules log when securit is lowered, not raised.
There may be ways to do this but it may help if you would share what you are trying to accomplish.
Tom

Similar Messages

  • Start/stop service log for workgoup server

    customer would like to know who start or stop the service on workgroup server.
    But we could not find such log. Is there any way to see this information?

    This one may help.
    http://windowsitpro.com/systems-management/access-denied-auditing-users-who-might-be-starting-and-stopping-services
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • BI server start/stop services

    Hi,
    We have OBIEE installed on a unix server. Previoulsy I worked on OBIEE on windows server and would go to services and start/stop services. My question is if we modify the rpd and ftp it to unix server, do we have to stop and start the BI server for the modified rpd to work. Is it mandatory to stop the BI server, ftp the rpd and then start BI server again. Or if we do not stop the BI server and just do Refresh matadata from Answers..will this work? Thanks.

    Hi User,
    You should restart the services if u ftping the rpd to unix means deploying the rpd to effect the changes
    When comes to refresh metadata this ll work in case when the rpd opened in online mode and some one has made changes to get the available changes u have to do "Refresh Metadata"
    Thanks,
    Saichand.v

  • Worth it? Auto start/stop services and change iptables rules

    I have recently set up a crontab to start/stop services based on my schedule, such as when I'll be home or away. I intend to only have a service running when I'll probably use it.
    I also integrated rules for iptables into the start/stop of the services (systemd), so they automatically modify rules to accept/reject on their ports when the services start/stop.
    I am behind a router, so I only forward outside ports I use like ssh (which is not on port 22). I manually forward ports, but am looking at UPnP. This is my home network so I should be able to trust the devices on it.
    Now, to my question. Is it worth the time and effort to set this up? Would it be fine to just enable the services I use, let them run and always have firewall ports open for them? I feel like it's good to limit the time that ssh is running, but what about services not open to the Internet? Resources aren't really an issue. What do you guys think?
    I enjoyed learning about systemd, iptables, and cron in the process of setting it up. I'd just like to also learn about how much benefit there actually is, or if anyone has other ideas. Or if it's something that could go on the wiki (not really cron, but maybe the iptables/systemd stuff).

    I'd say, if resources aren't an issue; why limit the time ssh is reachable from the outside? You should have PasswordAuthentication and RootLogin disabled anyway so your vulnerability doesn't really decrease by updating iptables? This script probably works fine until you forget about it and it makes a boo-boo; making your machine unreachable.

  • Which is the best structure for start/stop data logging?

    Hi everybody,
    hope I can explain my problem good enough that anyone can help me:
    I have a VI which continuely shows on a graph the voltage of a Analog Input of a DAQ device. Now I want to allow the user to start/stop with a click on a button data logging. Means that a second loop writes to a selected path every ms the data to a spreadsheet file.
    At the moment my VI works like this:
    You run the VI and Labview asks you one time for the file path, then you can start and stop the data logging. But you can do it only one time. If you want to log a certain time later another file, you have to close and open the whole VI again which is not very professional...
    My target is:
    It is onlyl necessary to start the VI one time. Then you can select a new file path, log data, select another file path, logging data again....and so on...
    Which programm structure is necessary, can anyone help me as a labview beginner with that issue? I attached the VI if someone just wants to edit that...
    Thank you for your help!! Markus
    Attachments:
    Logging voltage.vi ‏93 KB
    screenshot.JPG ‏98 KB

    @NaruF1 and GerdW
    you are right, there is a mistake, both loop rates should be the same (10 ms) :-)
    @NaruF1
    yes you understood correctly that the file dialog should appear every time the user wants to start writing a new log-file. The voltage we measure is a analog signal, so there will be several interesting periods we want to save for a later analysis in Excel.
    To your 2nd point: if it works with a array it will be fine. But it must be possible to log data for lets say 5 minutes, so the array won´t be too large? (5 min @ 10  ms loop rate will be 30000 rows..
    attached is the VI, saved as LV2009..
    Thanx a lot!
    @GerdW
    ..you ask why I didn´t create a structure like you recommended with notifiers or queues? The simple answer would be that I am not familiar with all this.. just began to write my first Labview programm. I will have al look to the LV help with all that stuff... Thank you a lot
    Attachments:
    Logging voltage.vi ‏80 KB

  • Windows Server 2008 - Group policy for domain client to start/stop services installed on it

    Hello Experts
    I am a newbie to windows server administration , though did a Google  , but ended up with these question with my requirements
    I have created a new domain and 2 client/computer (A & B namely) to domain . Now A & B has tomcat server running with port 8080 , 9090 which i have installed
    domain ADMIN account .
    && now i am want to start/stop/restart services enabled for domain users  !! How do i achieve this !!
    basic question : How can i access A & B tomcat services on DOMAIN CONTROLLER server to create a GPO and that are on (A & B)
    what is the easiest way to achieve the same , (if not using GPO)???
    similarly I am looking for many features : where I want to control the permission to user on (A & B ) like : If the binaries of tomcat is available on machine say : A , if the user can install (now
    it ask for ADMIN credentials) 
    Thanks
    Mike~Ed

    Controlling services with Group Policy is done under Computer Configuration\Policies\Windows Settings\Security Settings\System Services.
    The limitation is that system services can only see the services the computer running the Group Policy management console. To access other services, you will either need to create the services on your computer (install the software the adds the service)
    or install the remote server administration toolkit (RSAT) on the computer with the service already on it.
    If my answer helped you, check out my blog:
    Deploy Happiness

  • Using non-administrator user to start/stop services

    We have Crystal Report Server (BOE XI) running on Windows platform.
    Our customer's policy dictates that operator ID are to be use to manage starting/stopping of Crytal Report Server. The operator ID has no administrator rights and it has no access to the Microsoft Management Console.
    Would it be possible to use non-administrator ID to start/stop Crystal Report Server services? Appreciate if anyone could share on the configuration.
    Thank you.

    salafrance wrote:A simple way would be to write a small C program to run systemctl setuid root.
    So perhaps like this?
    #include <stdlib.h>
    #include <unistd.h>
    int main(void)
    execl("/usr/bin/systemctl", "systemctl", "start", "calibre", NULL);
    return(EXIT_SUCCESS);
    compiled it, then "chown root:root test", "chmod u+s test" and it worked.
    But is this safe? I have absolutely no knowledge about potential security issues...
    I also have thought about periodically restarting calibre, but on the Raspberry Pi, with it's slow ARM, the start takes ages and the processor is completely busy with that task for some minutes.
    And that's the reason why I also want to avoid starting an entire second systemd session... Or is this not that resource intensive?

  • Start / Stop / View Log of Sun Java System Application Server From My App.

    Hi forum folks, got this desktop application I am working on, it has a mail module which I built with JSP/Servlet and JavaMial and deployed to sun java system application server 9. The users click on a toolbar button to open the mail web-app on a browser from where they can use it.
    However, I want the administrator of the server (my desktop app's server and sun java system application server)to be able to use toolbar buttons, menu buttons or popup menus to start, stop, and view the log file of the sun java system application server (will be running on the same system) so as to control access to, and monitor the mail app from my desktop app's server .
    I also want to add some monitoring such that if sun java system application server is already running then the controls for starting it (or stopping it as the case may be) should be disabled, and monitor the start / stop processes with a progress bar etc
    In summary, I want to be able to start / stop / view the log and monitor start / stop state of sun java system application server form my desktop app just as it obtains in netbeans IDE, any ideas about how this can be achieved ????

    Hi
    How much memory can you allocate with 8.2 PE on a Windows 2003 Server that has 4 GB of physical memory ?
    I have tried xms2048m and xmx2048 but the server wan't start and reports :
    "Could not reserv enogh space for object heap"
    /Jan

  • OBIEE Start/Stop Services failed(After LDAP Configuration)

    Hi ,
    We made some changes(that is we have added new OID
    and configured the new OID based upon the Oracle BI security guide which is in Oracle Site
    ) to the LDAP configuration in OBIEE web console and it prompted for a restart of the OBIEE services . when we tried restarting the services we are not able to stop all the services . Please find the attached log files .
    Note:
    1.unable to kill the process ID
    which is releated to OBIEE 11.1.1.6.0 services..
    2.We have follwed the section 3 in the below link to configure the LDAP : http://docs.oracle.com/cd/E23943_01/bi.1111/e10543/toc.htm.
    Please find the below error details in short form and kindly find the attahced file(file name) for more details
    Error:
    Caused By: oracle.security.jps.service.igf.IGFException: JPS-02597: You configured a custom Authentication Provider or WLS generic LDAPAuthenticator, which the libOvd can not recognize. Supply the idstore.type property in jps-config.xml file, or use a specific WLS LDAP Authentication provider that matches your LDAP server instead of a generic one.
    at oracle.security.jps.internal.api.identitystore.IdentityStoreConfigurationUtil.checkIdStoreTypeLater(IdentityStoreConfigurationUtil.java:819)
    at oracle.security.jps.internal.api.identitystore.IdentityStoreConfigurationUtil.getLibOvdLdapPushData(IdentityStoreConfigurationUtil.java:524)
    at oracle.security.jps.internal.igf.ovd.OvdIGFServiceProvider$1.run(OvdIGFServiceProvider.java:232)
    at oracle.security.jps.internal.igf.ovd.OvdIGFServiceProvider$1.run(OvdIGFServiceProvider.java:229)
    at java.security.AccessController.doPrivileged(Native Method)
    Truncated. see log file for complete stacktrace
    >
    <Jan 29, 2013 6:39:05 AM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
    <Jan 29, 2013 6:39:05 AM CST> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
    <Jan 29, 2013 6:39:05 AM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state cha
    Error Codes
    Problem Category/Subcategory
    BI EE Platform Administration/Administration Tool
    Uploaded Files
    File: nohup.zip:134848
    Template Question Responses
    1) ### Admin Tool version ###
    2) Are you running Oracle Business Intelligence Enterprise Edition using virtualization or partitioning technologies (for example, VMWare) ?
    No
    3) If yes, please provide the product used and its version.
    4) ### Documentation Used ###
    5) ### Impact on Business ###
    Edited by: 919942 on Jan 31, 2013 5:10 AM

    "JPS-02597: You configured a custom Authentication Provider or WLS generic LDAPAuthenticator, which the libOvd can not recognize. Supply the idstore.type property in jps-config.xml file, or use a specific WLS LDAP Authentication provider that matches your LDAP server instead of a generic one."
    Looks like the config you entered was a tad off. Any chance you can roll back by restoring the original files from before the change?
    $FMWH/user_projects/domains/yourdomain/config/config.xml
    $FMWH/user_projects/domains/yourdomain/config/fmwconfig/jps-config.xml
    In the config.xml, inside the <realm> tag yo ushould find your authenticaiton providers and there's two important things for your new one to check:
    1.) xsi-type="wls:..." <-- This should be your OID type rather than a generic (or wrong) one
    2.) If you're not 100% sure about the config or don't want to immediately shut out native WLS users or want to retain them (both OID and WLS LDAP considered valid), then PLEASE make sure that you run your new authenticator with <sec:control-flag>SUFFICIENT</sec:control-flag> and don't make it REQUIRED since otherwise you won't be able to bring anything up anymore if a single parameter in the authenticator config is off...
    Also, check out what Tony wrote together a while back: http://www.peakindicators.com/index.php/knowledge-base/115-oracle-bi-11g-security-troubleshooting
    Update:
    Should have read the error message more carefully...looks like you actually just slipped by one line in the authenticator config and chose "OracleVirtualDirectory" instead of "OracleInternetDirectory" since it tries to use the libOvd rather than the OID one.
    Edited by: Christian Berg on Jan 31, 2013 2:58 PM

  • Start stop service from SCCM

    I would like to expose certain services on a server to all the users in a specific AD group. Wonder if it's possible to do so in SCCM? I was think may be I can create a dashboard for the user group and perhaps give them some visibility via SCCM to the services,
    event logs and app pools on a specific server. Not sure if it is possible to do so via SCCM. Please advice.
    Thanks
    SQL Pro

    Hi,
    Based on my experience, SCCM cannot achieve your requirement but SCOM could.
    Introduction to Configuration Manager
    http://technet.microsoft.com/en-us/library/gg682140.aspx
    Getting Started with System Center 2012 - Operations Manager
    http://technet.microsoft.com/en-us/library/hh509025.aspx
    About how to create dashboard is related to SCOM. You may choose to post there to get more effictive help.
    http://social.technet.microsoft.com/Forums/en-US/home?category=systemcenteroperationsmanager
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • How do starting/stopping of application services differ in R12 ??

    How do starting/stopping of application services differ in R12 when compared to 11i ??
    Can I start/stop services using opmnctl ??

    Can you plese refer me a document where role of OPMN and OC4J in R12 is mentioned ??? In short:-
    OPMN - Oracle Process Manager & Notification Server is component in Oracle Application Server (10g) to manage (start/stop/status) Application Server components (HTTP, OC4J)
    For more:-
    http://download.oracle.com/docs/cd/B14099_19/core.1012/b13996/intro.htm
    OC4J -- oracle container for java.
    In R12 we have 3 groups of OC4J's.
    oacore OC4J - framework based applications
    forms OC4J - forms based applications
    oafm OC4J - Fusion Middleware - for mapviewer, webservices, ascontrol.
    For more, pls read
    http://download.oracle.com/docs/cd/B10464_05/web.904/b10326/intro.htm
    thanks,
    JD

  • I am reinstalling Itunes on PC win 7 and have the message: "Apple mobile device failed to start verify that you have sufficient privileges to start system services" what does this mean and how do I check? I am already logged on as administrator.

    I am re-installing itunes on a PC Win 7 and have the message: "apple mobile device failed to start verify that you have sufficient privilegesto start system services" what does this mean? how do I check and rectify? I am already logged onto the PC as administrator

    I am having this same problem. I took Kappy advice on restarting the Apple Mobile Device Service, however that did not work. I got this message in a pop up window that came up immediately.
    Windows could not start the Apple Mobil Device Service on local computer.
    Error 1053  The service did not respond to the start or control request in a timely fashion.
    I have already uninstalled itunes, all the related programs and I cannot reinstall, this Apple Mobil Device message stops the install.
    Can anyone please help?

  • How should I start, stop or restart SQL services if it is in a cluster?

    Hi,
    For migration purpose I need to stop sql server services in a cluster. I don't want to failover the cluster I just want to stop the sql server services before the windows system admin shutdowns the windows server and later start again once migration is done.
    This is clone migration so I don't have to do anything except stopping and starting the services of sql. I found two places there to take service offline and online, one is just clicking the services and application and in the right hand side directly right
    clicking the instance and take service offline, another is expanding the instance and taking offline agent and sql server service one by one. 
    I don't know which is the way.
    Please some one help me.

    Hello,
    You can use SQL Server Configuration Manager, SQL Server Management Studio, Cluster Administrator.
    Do not use the Services applet in Control Panel.
    Hope this helps.
    Regards,
    Alberto Morillo
    SQLCoffee.com

  • Start/stop Grid Control services

    What are the service associated with Grid Control and what are the commands to start/stop them?

    Hi
    To start the grid control you need to start the agent
    and the web components in the oms home along with the agent.
    # Start ALL
    /oracle/product/10.1.0/oms/bin/emctl start agent
    /oracle/product/10.1.0/oms/opmn/bin/opmnctl startall
    /oracle/product/10.1.0/agent/bin/emctl start agent
    # Stop ALL
    /oracle/product/10.1.0/agent/bin/emctl stop agent
    /oracle/product/10.1.0/oms/opmn/bin/opmnctl stopall
    /oracle/product/10.1.0/oms/bin/emctl stop agent
    With best regards
    Shan

  • Start/stop the OMS Services on Same Host

    Hi,
    I have OMS, Repository database and Agent on the same host.....
    I want to stop and start the services...
    ==========================
    FOR Shutdown
    =====================================
    Stop the Agent
    $cd $ORACLE_HOME/agent10g/bin/emctl stop agent
    stop the OMS Services
    $cd $ORACLE_HOME/oms10g/opmn/bin/opmnctl stopall
    Stop the Repository Databas Listner
    $cd $ORACLE_HOME/bin/lsnrctl stop LISTENER
    STOP THE database
    $cd $ORACLE_HOME/bin/sqlplus '/as sysdba'
    sql> shutdown immediate
    ====================================
    FOR Startup
    =====================================
    start the Repository Listener
    $cd $ORACLE_HOME/bin/lsnrctl start LISTENER
    start the Database
    $cd $ORACLE_HOME/bin/sqlplus '/as sysdba'
    sql> startup
    start the OMS Service
    $cd $ORACLE_HOME/oms10g/opmn/bin/opmnctl startall
    start the Management Agent
    $cd $ORACLE_HOME/agent10g/bin/emctl start agent
    ======================================
    is this the correct procedure...
    can anybody help in this regard....

    As an outline, it looks ok I think.
    You may need some env variables set up in the script, add some error handling, etc...
    I want to stop and start the services...
    $cd $ORACLE_HOME/agent10g/bin/emctl stop agent
    $cd $ORACLE_HOME/oms10g/opmn/bin/opmnctl stopallRemove the "cd" from your command lines.

Maybe you are looking for