I have configured platform agent to audit events from eDirectory to
Sentinel. Sentinel is installed on Linux machine. The events are being
sent from eDirectory to Sentinel as required (able to see events in
Active Views).

Recently I have configured platform agent(logevent.conf) to cache the
events to Sentinel machine when ever Sentinel becomes unavailable.
Added the following two lines in logevent.conf file,
LogCachePort=1288
LogCacheDir=/home/events/ (valid directory on the machine where
Sentinel is installed)

Tried caching of events by stopping Event source in ESM (Sentinel), but
events are not being cached to Sentinel (checked the path where
LogCacheDir is configured)

Please help me in configuring platform agent and Sentinel, to cache the
events and also let me know in what all cases events can be cached to
Sentinel.

Thanx in advance.


--
kavatam
------------------------------------------------------------------------
kavatam's Profile: http://forums.novell.com/member.php?userid=92847
View this thread: http://forums.novell.com/showthread.php?t=458149