Enterprise Vault™ Compliance Accelerator Installation Guide

To modify the Enhanced Auditing setup

1. Launch the Veritas Enhanced Auditing installer. To launch the installer, do any of the following steps:

   • Run the MSI file from the command prompt.

   • Right-click on the available MSI file and click Run as administrator.

   • Navigate to the Control Panel and double-click the Add or Remove Programs applet. Find and click Veritas Enhanced Auditing in the list of installed programs.

   The installer opens the Welcome wizard.

   Note:

   Click Cancel if you want to cancel the installation at any stage. After you click Cancel, the application prompts you to confirm the operation. If you interrupt the installation process, the installer prompts you to run the installation again whenever required. Click Yes to complete the operation and click Finish to abort the installation. Click No to continue the installation.

2. Click Next to proceed to the Settings wizard. On the Modify, repair, or remove installation page, click Modify.
3. On the Veritas Enhanced Auditing Configuration page, provide the following details to create an Audit Server website and enable it for secured access. Then, click Next.

   • Server Name: Change the DNS Alias name or FQDN for the audit server, if required.

   • Port: Change the Port for the audit server site, if required. Enter a new port that is available to use. You must not use the default IIS port 80.

   • Comma-separated list of IP addresses from where the audit server can be accessed: Enter a comma-separated list of IP addresses of the servers from which the audit server needs to be accessed. These are the IP addresses for the Veritas Advanced Supervision server. If you want to keep the previous IP addresses, do not delete them. If you delete the previous IP addresses, the new IP addresses overwrite the previous ones. You can add the new IP addresses by separating every IP address by a comma. You can also provide ranges of IP addresses, for example - 10.219.5.227,10.219.5.226-229.

   • Holding folder Path: Browse to another directory where the audit data is stored temporarily, if required.

     Even though the previously selected holding folder may not be in use, it does not get deleted after the modification.

     Note:

     Ensure that the Access Control List (ACL) of the Holding Folder is not changed. The default users, such as SYSTEM, Built-in administrators, Audit Server Account, and IIS APPPOOL\AuditingServer, must be unchanged.

     Based on these details, the audit server URL format becomes:https://<auditservername>:<portnumber>.

4. Click Next.

   Note:

   If you try to modify the Elasticsearch URL, the application displays a warning message that the existing server data (auditing-specific) will not be automatically migrated to the new server. Therefore, before you change the Elasticsearch URL, ensure that you need to migrate it manually to the Elasticsearch server you want to use. Otherwise, this data will be lost.

5. On the Settings wizard, on the Ready to install page, click Install.
6. On the Veritas Enhanced Auditing Configuration page, ensure that the Elasticsearch installation location is appropriate. Then, click Next.
7. After the modification is complete, click Finish and restart the server to apply the changes.
8. To view the modification-specific logs, navigate to the folder where you have installed the Veritas Enhanced Auditing setup and access the Logs folder.