Versions Compared

Old Version 5

changes.mady.by.user Anonymous

Saved on

compared with

New Version Current

changes.mady.by.user Max Pinion (Deactivated)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info
titleSummary

Excerpt

By default Application Control Agent configuration options are not set to readily test configuration changes in a test environment. The following agent configuration testing allow for more immediate configuration allows for accelerated feedback when testing Use Cases.


 Configure the Application Control Agent for

...

accelerated configuration and feedback

  1. From the Arellia Console

...

  1. navigate to the Configuration tab.
  2. From the Configuration tab, select Settings / Agents/Plug-ins

...

  1. / Arellia

...

  1. / Application Control

...

  1. / Application Control Agent Configuration.
  2. Select Application Control Agent Configuration Policy.
  3. Set Send Application Action Events to one minute.
  4. Set Refresh Client Item Cache intervals to five minutes.
  5. Click Save.

Image Modified

Additional

...

configuration for

...

event reporting

To show other file details , (not just the file hash, ) in the application event reports Application Event Reports, we recommend a few other configurations are recommended.

  1. From

...

  1. the Arellia Console

...

  1.  navigate to the Configuration tab.
  2. From the Configuration tab, select Settings / Arellia / Infrastructure / Resource Discovery / Resource Discovery Agents.
  3. Right-click File Agent Discoverer, and

...

  1. select Enable.
  2. Right-click File Discoverer from ACS Events, and

...

  1. select Enable.

...

In production, what you will see is some file hashes without details. This is because the full loop process has not completed. By default, file inventory is 1 day, resource discovery update is 30 minutes, and Agent resource discovery is 12 hours so it can take a while to gather all the information. The gathering of file information is split into 3 parts in order to make events much more streamlined and scalable.

  1. File Inventory - this is done when an application executes or upon the file inventory schedule. The file hash and location is gathered locally on the client and the file hash sent to the SMP server.
  2. Resource Discovery Update - Any hash that does not have resource details is schedule to be discovered for one machine. We optimize the client and server load by only assigning one system to gather that detail.
  3. Agent Resource Discovery - Agents will pull down their jobs and determine what files need details to be discovered.
Warning
titleCaution

Changing the File Inventory, Resource Discovery Update, and Agent Resource Discovery configuration is not recommended outside a testing environment as it degrades system performance. It is only recommended so demonstration scenario results can be viewed immediately.

You can also speed up this process by increasing the agent resource discovery interval. (Recommended for Demo environments only.)

  • Select Default File Inventory Policy (Arellia / Agents/Plug-ins / Arellia / File Inventory / Settings).
    • Change the Interval to 10 minutes.
    • Click Save.
  • Select Default Resource Discovery Agent Policy (Arellia / Agents/Plug-ins / Arellia / Resource Discovery Agent Configuration).
    • Change the Interval to 5 minutes.
    • Click Save.
  • Select Resource Discovery Update (Arellia / Infrastructure / Resource Discovery).
    • Click New Schedule.
    • Select At date/time.
    • Set it to repeat every 5 minutes.
    • Click Save.

For further details see Application Control Agent Configuration.

...

titleCaution

...

.