Issue: Change Guardian Agent for UNIX is not able to connect to port 8094.
Workaround: Check whether the port 8094 is running:
netstat -an | grep 8094
Issue: Change Guardian Agent for UNIX services are not running.
Workaround:
Check if the detectd and auditd services are running:
ps -ef | grep "detect"
ps -ef | grep "auditd"
(Conditional) If the services are not running, restart the following services:
Restart vigilentagent service:
./vigilentagent.rc restart
Go to the - /usr/netiq/pssetup directory and run the following command:
./detectd.rc restart
Restart auditd service:
service auditd restart
Issue: The policies are not applied to the Change Guardian Agent for UNIX after it is assigned using Policy Editor.
Workaround: To verify whether the policies are applied to the agent after they are assigned in Policy Editor, check if the <rule>.xml file is created in the computer in the following directory:
/usr/netiq/vsau/etc/detectd.d/groups/<platformauditobject>/rules/
Issue: Change Guardian Agent for UNIX fails to send events to the Change Guardian Server if the locale setting is incorrect. (Bug 1102111)
Workaround: Ensure that the following is set:
The path is set at the operating system: SET_PERL_LIBPATH=1; ./etc/vsaunix.cfg
The locale variables are added to the /etc/profile file:
export LC_CTYPE=en_US.UTF-8
export LC_ALL=en_US.UTF-8
Issue: User Browse option does not work while creating policies using Policy Editor.
Workaround: To enable browsing for UNIX data sources while creating a policy, the computer where you install the Policy Editor must have a Change Guardian Agent for Windows. If you do not install an agent on the machine running Policy Editor, you must manually enter the data source paths while creating a policy.
To enter the data source paths:
(Conditional) If your operating system is 64-bit, in the registry \HKLM\SOFTWARE\Wow6432Node\NetIQ\ChangeGuardianAgent\repositoryEnabled set the repositoryEnabled flag to 1.
Restart the Change Guardian Agent for Windows.
You can use Agent Manger to collect logs from Change Guardian Agent for UNIX. You must install the agent using Agent Manager to be able to collect the agent logs.
You cannot set debug levels to agent log collection. The logs are collected based on whatever debug level is set in the agent.
To collect agent logs:
In Agent Manager, select the agent under All Assets.
Click Manage Installation > Collect Agent Logs > Start Log Collection.
In the Completed Tasks tab, click Download Agent Logs.
NOTE:You can download a log only once. For an agent, you can download the log that you collected last. The previously collected logs are overwritten every time you click Collect Agent Logs for that agent.