Steps to Event Log Consolidation

Navigation: Working with EventSentry > Actions > Database >

Please follow the steps outlined below to consolidate event log records to a central database. Depending on the database you are using you might need to perform additional steps. Please note that some of these steps may already have been performed by the setup.

	Microsoft SQL Server	MySQL	Oracle
Setup the database during installation with MSI package	X	X	-
Setting up the database with the Database Setup Wizard	X	X	X

Install a Database Server

If you do not already have a database like MS SQL or MySQL server running, then you will need to setup a database server on your network. The EventSentry web site contains guides that assist with the setup process (see http://www.eventsentry.com/support/documentation) as well as a setup assistant for MS SQL Server Express that can be downloaded from http://www.eventsentry.com/downloads.

Setup a database during installation with MSI package

When using Microsoft SQL Server, you can have the database setup automatically during the installation. You will need to select a custom installation type and select Setup MS SQL Server when installing. You will then be prompted for the name of the database server, the name of the database and the initial passwords for the eventsentry_svc and eventsentry_web user accounts.

Setting up the database with the Database Setup Wizard

The Database Setup Wizard is a GUI application that can setup the required tables, indexes and permissions automatically for you. To use the wizard follow these steps:

1.	Create an empty database (see your database documentation for details)

2.	Setup an ODBC system DSN that points to the new database

3.	Run the Database Setup Wizard

More information on the wizard is available in the Database Setup Wizard topic.

After the database is setup correctly, you will need to follow these steps to finish your event log consolidation:

1.	Create / configure the ODBC action in EventSentry and configure it to either use a connection string (recommended) or a System DSN. Test the ODBC action.

2.	Optional: If you are using a system DSN then make sure the specified ODBC System DSN exists on all machines that will write to the database. We recommend using AutoAdministrator if you need to roll out a system DSN name to multiple computers.

3.	Create one or more include filters that will collect event log information and forward them to the ODBC action (database). Event log consolidation will not start until the event log filters are properly setup.

4.	Use remote update to send the updated filters & actions to all hosts running the EventSentry agent.

5.	Setup the web reports to query the database through a web browser.