Configuring system audit events

Edit online

Configure where you want the IBM Verify Identity Governance - Virtual Appliance to send notifications about changes to system settings and problems with the virtual appliance.

About this task

Available objects include system audit events that are predefined in the virtual appliance and any system audit event objects that you created.

Important: Predefined system audit event objects cannot be deleted from the virtual appliance because they contain all the events that take place on the virtual appliance eventually. When you create objects such as SNMP, email, or syslog, you can delete these created objects.

Procedure

From the top-level menu of the Appliance Dashboard, click Manage > System Settings > System Audit Events.
The System Audit Events page displays the Available Objects pane and the Added Objects pane.
In the System Audit Events page, complete one or more of the following tasks.
- To create a system audit event object, click New.
  The following system audit event objects are listed:
  - SNMP
  - Email
  - Remote Syslog
  See these related topics to configure one or more of the following system audit event objects.
- To receive notifications for problems with the system, select one or more system audit event objects from the Available Objects pane, and add or move them to the Added Objects pane.
- To edit a system audit event object, complete the following steps:
  1. Select a system audit event object in the Added Objects pane.
  2. Click Edit.
  3. Change the values in these fields according to your requirement.
    - Name
    - Total Event Storage Limit
    - NAP Events Allocation
    - IPS Events Allocation
    - System Events Allocation
    - Comment
  4. Click Save Configuration.
Optional: To delete a system audit event object, do these steps.
1. Select a system audit event object that you created.
2. Click Delete.
3. Click Yes to confirm.
Click Save Configuration.
Optional: Click Reset to revert to the last updated changes.