RSA File Security Manager 2.1.10
Microsoft Windows Server 2003
Customer trying to retrieve an audit event, that occurred in May, from the Adapter Manager Audit log. However, the:
- Adapter Manager Audit Log only displays events dated on or after July 7 and
- first entry in the log is "Clear event log successful".
The above two bullet items suggest that earlier events were cleared from the log. Would like to restore a backup copy of the log from the May timeframe and use the backup copy to display the desired audit event.
The scope of issue is limited to just the "Adapter Manager audit log" (e.g., audit history of Security Officer activity, etc.). The scope does not include the "Adapters".
1. Create new folder ?BackupAudit? in C:\Program Files\RSA Adapter Manager Common\DataFiles\
2. From the tape backup, restore VDSFEventLog xml file to BackupAudit folder. This VDSFEventLog xml file can be located in ?C:\Program Files\RSA Adapter Manager Common\DataFiles\? in the backup.
3. Logon as Admin
4. Click on Audit option
5. Right-click on console log node in Adapter Manager Audit window
6. Select ?open log? option
7. Select restored VDSFEventLog xml file from BackupAudit folder.
8. Now a new node (Backup Event Viewer) will be added under Event Viewer. Under this new node Console Log events and File Log events are displayed.
Note: If Adapter Manager Audit window is closed then the new node is removed. If user needs to view again the old audit, he has to repeat process from step 5.
Related Articles
How do you retrieve the FSM Adapter Manager Audit log? Number of Views Audit event REVIEW_DEFNITION is misspelled in RSA Identity Governance & Lifecycle Number of Views How to create a compressed tar archive of the Oracle audit files in RSA Identity Governance & Lifecycle Number of Views New audit events available in RSA Identity Governance and Lifecycle 7.0 and above Number of Views Identity Router Audit Log Messages Number of Views
Trending Articles
Artifacts to gather in RSA Identity Governance & Lifecycle How to install the jTDS JDBC driver on WildFly for use with Data Collections in RSA Identity Governance & Lifecycle Unable to attach a replica instance due to a configuration error when enabling replication for the RADIUS server for RSA A… Oracle 12c TEMP_UNDO_ENABLED parameter for managing GTT UNDO activity in RSA Identity Governance & Lifecycle RSA announces the availability of the RSA SecurID Hardware Appliance 230 based on the Dell PowerEdge R240 Server
