EV Reach Server - Configuration - Centralizing Auditing Services

Last modified on 2023/07/12 14:03

The EV Reach Server automatically receives audited events and centrally stores them in the database. Currently, only EV Reach Remote Control Session events and Windows Login/Logout events are registered.

Viewing Audit Events

Select the Auditing tab to view a snapshot of the most recent events received by the server.

The top section displays Remote Control Session events while the bottom section displays Windows Login/Logout events. To view the full list of events, click on the corresponding View Full Log link. This opens a log viewer from where you can execute searches or export data.

If Secondary EV Reach Servers are implemented on one or more remote client sites, and Auditing Redirection is turned on, auditing events from these sites will also be displayed. Use the REACH Site column to define the origin of an audited event.

Auditing Settings

By default, the EV Reach Server keeps 180 days of events for each log type. However, this value can be changed in Auditing Settings.

Note:

  • Auditing cannot be turned off.
  • Windows login/logout events registered in the EV Reach Server are used by the EV Reach’s FastConnect feature that detects user logged-in workstations. Therefore, it is recommended to keep at least 30 days’ worth of events in the database to maintain detection accuracy.
Tags:
Powered by XWiki © EasyVista 2022