Adding a Failover Manager

For an introduction to Failover and Active Managers, see About Failover Managers.

Prior to completing the steps below, you should verify that the Failover ManagerA TLC ManagerTripwire Log Center Manager is the core software in your TLC environment. TLC Manager collects and processes log messages from a wide variety of systems and devices. that serves as a backup system for another Manager in the event of system downtime. host system can access the Audit Logger File StoreConsists of a series of compressed flat files containing the log messages collected by the Manager from Log Sources, and an index of terms contained in the log messages. and Event DatabaseA type of Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source.-Management Database that stores Events from any Log SourceAny log-generating application, operating-system service, database instance, or device from which TLC collects log messages. and/or scannerA device that monitors systems in your TLC environment (for example, a vulnerability scanner).. employed by the assigned Active ManagerA TLC Manager to which a Failover Manager has been assigned. (see Where does TLC store Data?).

To add a Failover Manager to your TLC environment:

1.

In the side bar, select Resources >Configuration ManagerIn the Configuration Manager, you can create and configure TLC Resources (Monitored Assets, AssetA Log Source in your TLC environment. See Monitored Assets and Discovered Assets. Groups, Managers, Locations, Event-Management Databases), normalization objects (NormalizationThe process of standardizing log messages for use by TLC. Standardized messages are known as Normalized Messages. Rules, Aliases, and Normalized-Message Filters), and correlation objects (CorrelationThe examination of Normalized Messages for events of interest, along with the ability to initiate appropriate responses; for example, sending an email notification to specified recipients. Engines, Rules, Lists, and Actions)..

2.

In the side bar of the Configuration Manager, select Resources >Managers.

3.

ClickAdd.

4.

In the Manager dialog, complete the following steps:

a.

Select the Settings tab.

b.

Select Use this Manager as Failover.

c.

Complete the remaining fields in the Settings tab (see Table 42) and click OK.

5.

Configure the e-mail settings for the Active Manager to be backed up by the Failover Manager (see Changing a Manager's Email Settings).

6.

In the General tab of the properties dialog of the administrator user account, enter the e-mail address of your TLC administrator (see Changing the Properties of a User Account).

7.

On the Failover Manager host system:

a.

Complete the installation steps for TLC Manager software (see Installing TLC Manager on a Failover Manager).

b.

In the TLC Manager InterfaceThe graphic user interface (GUI) for TLC Manager., complete the Failover Settings option (see Tripwire Log Center Manager).