Skip to content

Commit 04fa9cf

Browse files
committed
everything working through groupid so far
1 parent d8e4417 commit 04fa9cf

File tree

253 files changed

+549
-598
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

253 files changed

+549
-598
lines changed

docs/ActivityMonitor/Config/DellCelerraVNX/Activity.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,17 +25,17 @@ Checklist Item 2: Install Dell CEE
2525
- Open MS-RPC ports between the Dell device and the Windows proxy server(s) where the Dell CEE is installed
2626
- Dell CEE 8.4.2 through Dell CEE 8.6.1 are not supported for use with the VCAPS feature
2727
- Dell CEE requires .NET Framework 3.5 to be installed on the Windows proxy server
28-
- See the [Install & Configure Dell CEE](/docs/activitymonitor/config/dellcelerravnx/installcee.md) topic for instructions.
28+
- See the [Install & Configure Dell CEE](/docs/activitymonitor/config/dellcelerravnx/InstallCEE.md) topic for instructions.
2929

3030
Checklist Item 3: Dell Device Configuration
3131

3232
- Configure the ```cepp.conf``` file on the Celerra VNX Cluster
33-
- See the [Connect Data Movers to the Dell CEE Server](/docs/activitymonitor/config/dellcelerravnx/installcee.md#connect-data-movers-to-the-dell-cee-server) topic for instructions.
33+
- See the [Connect Data Movers to the Dell CEE Server](/docs/activitymonitor/config/dellcelerravnx/InstallCEE.md#connect-data-movers-to-the-dell-cee-server) topic for instructions.
3434

3535
Checklist Item 4: Activity Monitor Configuration
3636

3737
- Deploy the Activity Monitor Activity Agent, preferably on the same server where Dell CEE is installed
3838

39-
- After activity agent deployment, configure the Dell CEE Options tab of the agents Properties window within the Activity Monitor Console
39+
- After activity agent deployment, configure the Dell CEE Options tab of the agent's Properties window within the Activity Monitor Console
4040

4141
Checklist Item 5: Configure Dell CEE to Forward Events to the Activity Agent

docs/ActivityMonitor/Config/DellCelerraVNX/InstallCEE.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@ __Step 2 –__ Follow the instructions in the Dell [Using the Common Event Enabl
1515
- EMC Checker Service (Display Name: EMC CAVA)
1616
- EMC CEE Monitor (Display Name: EMC CEE Monitor)
1717

18-
___RECOMMENDED:___ The latest version of .NET Framework and Dell CEE is recommended to use with the asynchronous bulk delivery (VCAPS) feature.
18+
___RECOMMENDED:___ The latest version of .NET Framework and Dell CEE is recommended to use with the asynchronous bulk delivery (VCAPS) feature.
1919

20-
See the [CEE Debug Logs](/docs/activitymonitor/config/dellunity/validate.md#cee-debug-logs) section for information on troubleshooting issues related to Dell CEE.
20+
See the [CEE Debug Logs](/docs/activitymonitor/config/dellunity/Validate.md#cee-debug-logs) section for information on troubleshooting issues related to Dell CEE.
2121

2222
After Dell CEE installation is complete, it is necessary to [Connect Data Movers to the Dell CEE Server](#Connect-Data-Movers-to-the-Dell-CEE-Server).
2323

@@ -65,17 +65,17 @@ __NOTE:__ Do not use a # charter.
6565

6666
__Step 2 –__ Create or retrieve the ```cepp.conf``` file.
6767

68-
If there is not a ```cepp.conf``` file on the Data Mover(s), use a text editor to create a new blank file in the home directory named ```cepp.conf```. The following is an example command if using the text editor ‘vi’ to create a new blank file:
68+
If there is not a ```cepp.conf``` file on the Data Mover(s), use a text editor to create a new blank file in the home directory named ```cepp.conf```. The following is an example command if using the text editor 'vi' to create a new blank file:
6969

7070
$ vi cepp.conf
7171

7272
> If a ```cepp.conf``` file already exists, it can be retrieved from the Data Movers for modification with the following command:
7373
74-
$ server\_file [DATA\_MOVER\_NAME] -get cepp.conf cepp.conf
74+
$ server_file [DATA_MOVER_NAME] -get cepp.conf cepp.conf
7575

7676
__Step 3 –__ Configure the ```cepp.conf``` file. For information on the ```cepp.conf``` file, see the Dell [Using the Common Event Enabler for Windows Platforms](https://www.dellemc.com/en-us/collaterals/unauth/technical-guides-support-information/products/storage-3/docu48055.pdf) guide instructions on how to add parameters or edit the values or existing parameters.
7777

78-
__NOTE:__ The information can be added to the file on one line or separate lines by using a space and a ”\” at the end of each line, except for the last line and the lines that contain global options: ```cifsserver```, ```surveytime```, ```ft```, and ```msrpcuser```.
78+
__NOTE:__ The information can be added to the file on one line or separate lines by using a space and a "\"" at the end of each line, except for the last line and the lines that contain global options: ```cifsserver```, ```surveytime```, ```ft```, and ```msrpcuser```.
7979

8080
The Activity Monitor requires the following parameters to be set in the ```cepp.conf``` file:
8181

@@ -95,19 +95,19 @@ The Activity Monitor requires the following parameters to be set in the ```cepp.
9595

9696
msrpcuser=[DOMAIN\DOMAINUSER]
9797

98-
pool name=[POOL\_NAME] \
98+
pool name=[POOL_NAME] \
9999

100-
servers=[IP\_ADDRESS1]|[IP\_ADDRESS2]|... \
100+
servers=[IP_ADDRESS1]|[IP_ADDRESS2]|... \
101101

102102
postevents=[EVENT1]|[EVENT2]|...
103103

104104
Example cepp.conf file format for the Activity Monitor:
105105

106106
msrpcuser=[DOMAIN\DOMAINUSER running CEE services]
107107

108-
pool name=[POOL\_NAME for configuration container] \
108+
pool name=[POOL_NAME for configuration container] \
109109

110-
servers=[IP\_ADDRESS where CEE is installed]|... \
110+
servers=[IP_ADDRESS where CEE is installed]|... \
111111

112112
postevents=[EVENT1]|[EVENT2]|...
113113

@@ -123,20 +123,20 @@ The Activity Monitor requires the following parameters to be set in the ```cepp.
123123

124124
__Step 4 –__ Move the ```cepp.conf``` file to the Data Mover(s) root file system. Run the following command:
125125

126-
$ server\_file [DATA\_MOVER\_NAME]‑put cepp.conf cepp.conf
126+
$ server_file [DATA_MOVER_NAME]‑put cepp.conf cepp.conf
127127

128128
__NOTE:__ Each Data Mover which runs Celerra Event Publishing Agent (CEPA) must have a ```cepp.conf``` file, but each configuration file can specify different events.
129129

130130
__Step 5 –__ (This step is required only if using the ```msrpcuser``` parameter) Register the MSRPC user (see Step 3 for additional information on this parameter). Before starting CEPA for the first time, the administrator must issue the following command from the Control Station and follow the prompts for entering information:
131131

132-
/nas/sbin/server\_user server\_2 -add -md5 -passwd [DOMAIN\DOMAINUSER for msrpcuser]
132+
/nas/sbin/server_user server_2 -add -md5 -passwd [DOMAIN\DOMAINUSER for msrpcuser]
133133

134134
__Step 6 –__ Start the CEPA facility on the Data Mover. Use the following command:
135135

136-
server\_cepp [DATA\_MOVER\_NAME] -service –start
136+
server_cepp [DATA_MOVER_NAME] -service –start
137137

138138
Then verify the CEPA status using the following command:
139139

140-
server\_cepp [DATA\_MOVER\_NAME] -service –status
140+
server_cepp [DATA_MOVER_NAME] -service –status
141141

142142
Once the ```cepp.config``` file has been configured, it is time to configure and enable monitoring with the Activity Monitor. See the [Netwrix Activity Monitor Documentation](https://helpcenter.netwrix.com/category/activitymonitor) for additional information.

docs/ActivityMonitor/Config/DellCelerraVNX/Validate.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ Once the Activity Monitor agent is configured to monitor the Dell device, the au
44

55
## Validate Dell CEE Registry Key Settings
66

7-
__NOTE:__ See the [Configure Dell Registry Key Settings](/docs/activitymonitor/config/dellunity/installcee.md#configure-dell-registry-key-settings) topic for information on manually setting the registry key.
7+
__NOTE:__ See the [Configure Dell Registry Key Settings](/docs/activitymonitor/config/dellunity/InstallCEE.md#configure-dell-registry-key-settings) topic for information on manually setting the registry key.
88

99
After the Activity Monitor activity agent has been configured to monitor the Dell device, it will configure the Dell CEE automatically if it is installed on the same server as the agent. This needs to be set manually in the rare situations where it is necessary for the Dell CEE to be installed on a different server than the Windows proxy server(s) where the Activity Monitor activity agent is deployed.
1010

docs/ActivityMonitor/Config/DellPowerScale/Activity.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Checklist Item 1: Plan Deployment
2121

2222
___RECOMMENDED:___ You can achieve higher throughput and fault tolerance by monitoring the Isilon/PowerScale cluster with more than one pair of Dell CEE and Activity Monitor Agent. The activity will be evenly distributed between the pairs.
2323

24-
Checklist Item 2: [Install Dell CEE](/docs/activitymonitor/config/dellpowerscale/installcee.md)
24+
Checklist Item 2: [Install Dell CEE](/docs/activitymonitor/config/dellpowerscale/InstallCEE.md)
2525

2626
- Dell CEE should be installed on a Windows or a Linux server.
2727

docs/ActivityMonitor/Config/DellUnity/Activity.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ A Dell Unity device can be configured to audit Server Message Block (SMB) protoc
44

55
If the service is turned off, a notification will be sent to the Dell CEE framework to turn off the associated Activity Monitor filter, but the policy will not be removed.
66

7-
The Dell CEE Framework uses a push mechanism so a notification is sent only to the activity agent when a transaction occurs. Daily activity log files are created only if activity is performed. No activity log file is created if there is no activity for the day.
7+
The Dell CEE Framework uses a "push" mechanism so a notification is sent only to the activity agent when a transaction occurs. Daily activity log files are created only if activity is performed. No activity log file is created if there is no activity for the day.
88

99
Configuration Checklist
1010

@@ -20,7 +20,7 @@ Checklist Item 1: Plan Deployment
2020

2121
- [http://support.emc.com](http://support.emc.com/)
2222

23-
Checklist Item 2: [Install Dell CEE](/docs/activitymonitor/config/dellunity/installcee.md)
23+
Checklist Item 2: [Install Dell CEE](/docs/activitymonitor/config/dellunity/InstallCEE.md)
2424

2525
- Dell CEE should be installed on the Windows proxy server(s) where the Activity Monitor activity agent will be deployed
2626

@@ -41,7 +41,7 @@ Checklist Item 4: Activity Monitor Configuration
4141

4242
- Deploy the Activity Monitor activity agent to a Windows proxy server where Dell CEE was installed
4343

44-
- After activity agent deployment, configure the Dell CEE Options tab of the agents Properties window within the Activity Monitor Console
44+
- After activity agent deployment, configure the Dell CEE Options tab of the agent's Properties window within the Activity Monitor Console
4545

4646
- Automatically sets the Dell registry key settings
4747

@@ -51,4 +51,4 @@ __NOTE:__ When Dell CEE is installed on Windows proxy server(s) where the Activi
5151

5252
- Ensure the Dell CEE registry key has enabled set to 1 and has an EndPoint set to StealthAUDIT.
5353
- Ensure the Dell CAVA service and the Dell CEE Monitor service are running.
54-
- See the [Validate Setup](/docs/activitymonitor/config/dellunity/validate.md) topic for instructions.
54+
- See the [Validate Setup](/docs/activitymonitor/config/dellunity/Validate.md) topic for instructions.

docs/ActivityMonitor/Config/DellUnity/Validate.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ Once the Activity Monitor agent is configured to monitor the Dell device, the au
44

55
## Validate CEE Registry Key Settings
66

7-
__NOTE:__ See the [Configure Dell Registry Key Settings](/docs/activitymonitor/config/dellcelerravnx/installcee.md#configure-dell-registry-key-settings) topic for information on manually setting the registry key.
7+
__NOTE:__ See the [Configure Dell Registry Key Settings](/docs/activitymonitor/config/dellcelerravnx/InstallCEE.md#configure-dell-registry-key-settings) topic for information on manually setting the registry key.
88

99
After the Activity Monitor activity agent has been configured to monitor the Dell device, it will configure the Dell CEE automatically if it is installed on the same server as the agent. This needs to be set manually in the rare situations where it is necessary for the Dell CEE to be installed on a different server than the Windows proxy server(s) where the Activity Monitor activity agent is deployed.
1010

docs/ActivityMonitor/activitymonitor/admin/agents/add/single.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ __Step 3 –__ On the Specify Port page, specify the port that should be used by
1818

1919
__Step 4 –__ On the Credentials To Connect To The Server(s) page, select ether Windows or Linux file monitoring. Then, enter the __User name__ and __Password__ to connect to the API Server.
2020

21-
[![Test Account Connection](/img/product_docs/activitymonitor/activitymonitor/admin/agents/add/testaccountconnection.png)](/docs/activitymonitor/resources/images/activitymonitor/manualinstall/single/testaccountconnection.png)
21+
![Test Account Connection](/img/product_docs/activitymonitor/activitymonitor/admin/agents/add/testaccountconnection.png)
2222

2323
__Step 5 –__ Click __Connect__ to test the connection. If the connection is successful, click __Next__. If the connection is unsuccessful, see the status message that appears for information on the failed connection and correct the error to proceed.
2424

docs/ActivityMonitor/activitymonitor/admin/monitoredhosts/add/dellcelerravnx.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ It also provides the ability to feed activity data to other Netwrix products:
1717
- Netwrix Threat Prevention
1818
- Netwrix Threat Manager
1919

20-
Prior to adding a Dell Celerra or VNX host to the Activity Monitor, the prerequisites for the target environment must be met. See the [Dell Celerra & Dell VNX Activity Auditing Configuration](/docs/activitymonitor/config/dellcelerravnx/activity.md) topic for additional information.
20+
Prior to adding a Dell Celerra or VNX host to the Activity Monitor, the prerequisites for the target environment must be met. See the [Dell Celerra & Dell VNX Activity Auditing Configuration](/docs/activitymonitor/config/dellcelerravnx/Activity.md) topic for additional information.
2121

2222
_Remember,_ the Activity Agent must be deployed to a Windows server that acts as a proxy for monitoring the target environment.
2323

@@ -51,14 +51,14 @@ Click __Next__.
5151

5252
![Configure Basic Options Page](/img/product_docs/activitymonitor/activitymonitor/admin/monitoredhosts/add/configurebasicoptions.png)
5353

54-
__Step 6 –__ On the Configure Basic Options page, choose which settings to enable. The Log files are the activity logs created by the activity agent on the proxy host. Select the desired options:
54+
__Step 6 –__ On the Configure Basic Options page, choose which settings to enable. The "Log files" are the activity logs created by the activity agent on the proxy host. Select the desired options:
5555

5656
- Report account names – Adds an __Account Name__ column in the generated TSV files
57-
- Add C:\ to the beginning of the reported file paths – Adds C:\ to file paths to be displayed like a Windows file path:
57+
- Add C:\ to the beginning of the reported file paths – Adds 'C:\" to file paths to be displayed like a Windows file path:
5858
- Display example if checked – C:\Folder\file.txt
5959
- Display example if unchecked – /Folder/file.text
6060
- Resolve UNC paths – Adds a __UNC Path__ column and a __Rename UNC Path__ column in the generated TSV files
61-
- This option corresponds to the REPORT\_UNC\_PATH parameter in the INI file. It is disabled by default. The UNC Path is in the following format:
61+
- This option corresponds to the REPORT_UNC_PATH parameter in the INI file. It is disabled by default. The UNC Path is in the following format:
6262
- For CIFS activity – \\[HOST]\[SHARE]\[PATH]
6363
- Example CIFS activity – \\ExampleHost\TestShare\DocTeam\Temp.txt
6464
- For NFS activity – [HOST]:/[VOLUME]/[PATH]
@@ -76,9 +76,9 @@ __Step 7 –__ On the Where To Log The Activity page, select whether to send the
7676

7777
![File Output Page](/img/product_docs/activitymonitor/activitymonitor/admin/monitoredhosts/add/fileoutputpage.png)
7878

79-
__Step 8 –__ If __Log File__ is selected on the __Where To Log The Activity__ page, the __File Output__ page can be configured.
79+
__Step 8 –__ If __Log File__ is selected on the __Where To Log The Activity__ page, the __File Output__ page can be configured.
8080

81-
- Specify output file path – Specify the file path where log files are saved. Click the ellipses button (__...__) to open the Windows Explorer to navigate to a folder destination. Click __Test__ to test if the path works.
81+
- Specify output file path – Specify the file path where log files are saved. Click the ellipses button (__...__) to open the Windows Explorer to navigate to a folder destination. Click __Test__ to test if the path works.
8282
- Period to keep Log files – Log files will be deleted after the period entered number of days entered. The default is 10 days. Use the dropdown to specify whether to keep the Log files for a set amount of Minutes, Hours, or Days.
8383
- This log file is for Access Analyzer – Enable this option to have Access Analyzer collect this monitored host configuration
8484

@@ -87,14 +87,14 @@ __Step 8 –__ If __Log File__ is selected on the __Where To Log The Activity__
8787
- While the Activity Monitor can have multiple configurations per host, Access Analyzer can only read one of them.
8888
- Add header to Log files – Adds headers to TSV files. This is used to feed data into Splunk.
8989

90-
Click __Next__.
90+
Click __Next__.
9191

9292
![Syslog Output Page](/img/product_docs/activitymonitor/activitymonitor/admin/monitoredhosts/add/syslogoutput.png)
9393

9494
__Step 9 –__ If Syslog Server is selected on the __Where To Log The Activity__ page, the Syslog Output page can be configured.
9595

9696
- Syslog server in SERVER[:PORT] format – Type the __Syslog server name__ with a SERVER:Port format in the text box.
97-
- The server name can be short name, fully qualified name (FQDN), or IP Address, as long as the organizations environment can resolve the name format used. The Event stream is the activity being monitored according to this configuration for the monitored host.
97+
- The server name can be short name, fully qualified name (FQDN), or IP Address, as long as the organization's environment can resolve the name format used. The Event stream is the activity being monitored according to this configuration for the monitored host.
9898
- Syslog Protocol – Identify the __Syslog protocol__ to be used for the Event stream. The drop-down menu includes:
9999
- UDP
100100
- TCP
@@ -112,11 +112,11 @@ __Step 9 –__ If Syslog Server is selected on the __Where To Log The Activity__
112112
- Splunk – Use this template for Splunk integration
113113
- Threat Manager – Use this template for Threat Manager integration. This is the only supported template for Threat Manager. See the [Netwrix Threat Manager Documentation](https://helpcenter.netwrix.com/category/stealthdefend) for additional information.
114114
- Custom templates can be created. Select the desired template or create a new template by modifying an existing template within the Syslog Message Template window. The new message template will be named Custom.
115-
- Add C:\ to the beginning of the reported file paths – Adds C:\ to file paths to be displayed like a Windows file path:
115+
- Add C:\ to the beginning of the reported file paths – Adds 'C:\" to file paths to be displayed like a Windows file path:
116116
- Display example if checked – C:\Folder\file.txt
117117
- Display example if unchecked – /Folder/file.text
118118
- Resolve UNC paths – Adds a __UNC Path__ column and a __Rename UNC Path__ column in the generated TSV files
119-
- This option corresponds to the REPORT\_UNC\_PATH parameter in the INI file. It is disabled by default. The UNC Path is in the following format:
119+
- This option corresponds to the REPORT_UNC_PATH parameter in the INI file. It is disabled by default. The UNC Path is in the following format:
120120
- For CIFS activity – \\[HOST]\[SHARE]\[PATH]
121121
- Example CIFS activity – \\ExampleHost\TestShare\DocTeam\Temp.txt
122122
- For NFS activity – [HOST]:/[VOLUME]/[PATH]
@@ -139,7 +139,7 @@ The added Dell Celerra or VNX host is displayed in the Monitored Hosts table. On
139139

140140
## Host Properties for Dell Celerra or VNX
141141

142-
Configuration settings can be edited through the tabs in the hosts Properties window. The configurable host properties are:
142+
Configuration settings can be edited through the tabs in the host's Properties window. The configurable host properties are:
143143

144144
- [Dell Tab](/docs/activitymonitor/activitymonitor/admin/monitoredhosts/properties/dell.md)
145145
- [Inactivity Alerts Tab](/docs/activitymonitor/activitymonitor/admin/monitoredhosts/properties/inactivityalerts.md)

0 commit comments

Comments
 (0)