Files of Indeed AM Log Server reside in: indeed AM\Indeed AM Log Server\<Version number>\

  • IndeedAM.LogServer-x64.msi  is the installation package of Indeed Log Server.
  • IndeedAM.Server.EventLog-x64.msi is the package that provides for the necessary log infrastructure in Windows EventLog.

Indeed AM Admin Console does not allow to read events from  sysLog server. To display the log in Admin Console, you have to create a separate database (SQL Server or EventLog) to store LogServer events.

Installation

  1. Install the Indeed AM Log Server by running IndeedAM.LogServer-x64.msi installer.

  2. Add HTTPS binding in Default Web Site settings of IIS Manager.

    Indeed AM Log Server is a web application on the basis of IIS. “Require SSL” is a default installation setting, which, in turn, requires active HTTPS binding.

    If you do not plan to use https protocol, then deactivate SSL requirement in IIS settings for logserver.

    1. Run IIS Manager and expand the Sites item.
    2. Select the Default Web Site site and click Bindings item in the Actions section.
    3. Click Add:
      1. Type - https.
      2. Port - 443.
      3. Select the SSL Certificate.
    4. Save the binding.

  3. Creating a database to store log files and users.

Installation of sysLog server.

Indeed AM Log Server supports sys-log format. You can use any server that supports the format as well. Below is an example of configuring the sys-log server named Syslog Watcher v4.8.6.

The utility is available for downloading at the official website https://syslogwatcher.com

  1. Run the SyslogWatcherSetup-*.*.*-win32.msi installation package.
  2. Accept the license agreement in the "License Agreement" window.
  3. Select "Install Syslog Watcher Service and GUI” installation type in “Installation type” window.
  4. Select the path to syslog server folder in the "Select installation Folder” window.
  5. Allow adding a rule for all incoming connections for SysLog Watcher to Windows Firewall in the "Windows Firewall Exception" window.
  6. Click “Next” in "Confirm Installation" window to confirm installation.
  7. Wait until server installation is complete.

sysLog server configuration.

  1. Run Syslog Watcher and select "Manage Local Syslog Server” item.
  2. Click "Settings" in the upper menu.
    1. Select "Network Interfaces” item.
    2. Make sure that UDP protocol is selected and port is specified.
    3. Select "Processing” item. Select UTF-8 encoding.


 Modifying a configuration file.

  1. Open the configuration file sampleSyslog.config (C:\inetpub\wwwroot\ils\targetConfigs\sampleSyslog.config).

  2. Specify parameters for connection to syslog in "Settings" tag. 

    Configuration example is given for Syslog Watcher
    <Settings HostName="localhost" Port="514" Protocol="udp" />
  3. Open the configuration file clientApps.config (C:\inetpub\wwwroot\ils\clientApps. config).

  4. Specify sampleSyslog in TargetId and ReadTargetId tags for segment with "Application Id="ea"”.

    The TargetId and ReadTargetId tags specify an identifier of the selected log storage type.

    The identifiers are defined in <Targets>...</Targets> tag. Configuration files for each storage types reside in targetConfigs folder with the corresponding name.

    Example
    <Application Id="ea" SchemaId="eaSchema">
    <ReadTargetId>sampleSyslog</ReadTargetId>
        <WriteTargets>
            <TargetId>sampleSyslog</TargetId>
        </WriteTargets> <AccessControl>
<!--<CertificateAccessControl CertificateThumbprint="001122...AA11" Rights="Read" />--> </AccessControl>
</Application>
  5. Click "Start Server" in the upper left corner of Syslog Watcher application window. 

Example of data display

  • Example of data display in Syslog Watcher.



  • No labels