This topic describes the ODBC event source configuration parameters.
To access the ODBC Event Source Configuration Parameters:
- In the Security Analytics menu, select Administration >Services.
- In the Services grid, select a Log Collector service.
- Click under Actions and select View > Config.
The Service Config view is displayed with the Log Collector General tab open.
- In the Log Collector Event Sources tab, select ODBC/Config from the drop-down menu.
The ODBC/Config view in the Event Sources tab has two panels: Event Categories and Sources.
Event Categories Panel
The Event Categories panel provides a way to add or delete event source types.
Available Event Sources Types Dialog
In this dialog, you select the event source type for which you want to define parameters.
This dialog contains the list of event source types downloaded from the list of event source types in the Generic ODBC Type Specification (GOTS) file. If you do not see any event source types in this list, you did not load the content available with Log Collector upgrade to this release.
Use the Sources panel to review, add, modify, and delete Data Source Name (DSN) parameters.
An ODBC DSN tells the Log Collector how to reach an ODBC endpoint. You refer to an ODBC DSN when you configure a data source name with information such as which ODBC driver to use or the host name and port of the ODBC endpoint.
An ODBC DSN is a sequence of name‐value pairs. For information about the valid names for a given ODBC data source type, such as Sybase, Microsoft SQL Server, or Oracle, please download the DataDirect Connect Series for ODBC User's Guide and DataDirect Connect Series for ODBC User's Guide in the Progress DataDirect Documentation Library.
The following table provides descriptions of the toolbar options.
Add or Edit DSN Dialog
In this dialog, you add or modify an event source for the selected event source.
|DSN*||The data source name (DSN) that defines the database from which to collect events.|
Select an existing DSN from the drop-down list. The values in this list are maintained in the ODBC DSNs Event Source Configuration Parameters.
|Username*||User name that the data source name uses to connect to the database. You must specify a user name when you create the event source.|
|Password||Password that the data source name uses to connect to the database. |
Caution: The password is encrypted internally and is displayed in its
|Enabled||Select the checkbox to enable the event source configuration to start collection. The checkbox is selected by default.|
|Address*||For ODBC, this field is not used. The Log Collector uses the address in the ODBC.ini file.|
|Max Cell Size||Maximum size in bytes of the data that the Log Collector can pull from one cell in the database. The default value is 2048.|
|Nil Value||Character string that the Log Collector displays when NIL is returned for a cell in the database. Default value: “” (null).|
|Polling Interval||Interval (amount of time in seconds) between each poll. The default value is 180.|
For example, if you specify 180, the collector schedules a polling of the event source every 180 seconds. If the previous polling cycle is still underway, the collector waits for that cycle to finish. If you have a large number of event sources that you are polling, it may take longer than 180 seconds for the polling to start because the threads are busy.
|Max Events Poll||The maximum number of events per polling cycle (how many events collected per polling cycle).|
Caution: Only enable debugging (set this parameter to On or Verbose) if you have a problem with an event source and you need to investigate this problem. Enabling debugging will adversely affect the performance of the Log Collector.Enables or disables debug logging for the event source. Valid values are:
If you change this value, the change takes effect immediately (no restart required).
The debug logging is verbose, so limit the number of event sources to minimize performance impact.
|Initial Tracking Id||Initial identification code that the Log Collector assigns to this event source if collection is not started. If there is no value for this parameter, the Log Collector starts at the end of the table and only pulls rows after the end of the table as they are added. The default value is “” (null).|
|Filename||For Microsoft SQL Server Event Sources only, the location of the trace files directory (for example, C:\MyTraceFiles).|
Please refer to the RSA Microsoft SQL Server Event Source Configuration Guide, located on RSA Secure Care Online (SCOL) for detailed information on how to create this directory with the correct permissions.
|Test Connection||Checks the configuration parameters specified in this dialog to make sure they are correct.|
|Cancel||Closes the dialog without adding or modifying DSN parameters.|
|OK||Adds or modifies the parameters for the DSN.|