I am interested to know if anyone has configured collection of events from a MySQL database? If so, any tips would be greatly appreciated.
Please check out the following post. I had previously highlighted a few tips on collecting logs from ODBC databases.
[[page no longer exists]]
Thanks for the prompt response. I did read your previous post - but it did not mention MySQL specifically. I just wondered if it was possible, before I spent time trying to get it working.
I'm guessing it is possible and I should go ahead and try?!
Yeah, there are probably a zillion other types/brands of databases I didn't specifically mention, but as long as you can access them via ODBC, you should be able to pull data.
Give it a twirl, and if you get really stuck, don't hesitate to post here with details.
There is probably someone watching/reading and reading who may have already tried the same thing.
Okay. So I installed a test MySQL server (v5.0) and created a database, table and data. I installed the MySQL ODBC connector on my ES appliance and configured it. In the enVision GUI I setup an 'ODBC Type' and the 'ODBC Service'. It all works great!
I have one question: I'm using a simple 'log_id' column for %TRACKING%. If I delete all the data in my database and start my entries at log_id=1, enVision still remembers where it got to previously and doesn't pickup the new data. Is it possible to 'reset' the %TRACKING% counter? I've tried recreating the 'ODBC Type', restarting the appliance, creating a completely new database, but enVision seems to remember the value of %TRACKING% whatever I do!
Any advice appreciated.
Yes, you can reset the tracking counters so that the ODBC service will start over again for a particular event source.
Do these steps to reset the tracking value:
1) Stop the NIC ODBC Service
2) On the appliance OS, go into the E:\nic\csd\config\odbcs\<your collector name> folder
3) Delete the .LAST file associated with your event source
4) Start the NIC ODBC Service
This will recreate the .LAST file you just deleted, but the counter within will be reset to zero.
Ah. It's per event source - that explains it. Thanks for the reset method.
HI and thanks to all for your support,
I want to integrate SUN IDM logs to RSA enVision. The logs are storred in a table in Oracle database table. Can anybody help me with issue so that I can go forward with developing UDS for the same.
Thanks & regards,
Hi to all,
I would need to reset the "Tracking Column" value in a enVision 3.7 multiple appliance site.
I tried to follow the method described in this post but I haven't found any .LAST file in enVision appliances.
Could anyone help me?
Official support for MySQL Enterprise 5.1 is part of the recently posted January ESU on SCOL.
Retrieving data ...