Sentinel Agent Manager supports monitoring and collecting logs from Windows environments. This section provides an overview of how to install agents on Windows computers.
NOTE:Depending on the number of computers you want to monitor, deploying agents may take some time. You can begin configuring Sentinel Agent Manager while Sentinel Agent Manager deploys agents. For more information about deploying agents, see Section 3.7, Configuring Sentinel Agent Manager.
You can configure Sentinel Agent Manager to automatically deploy agents to Windows computers using the Agent Administrator, which is available in the Agent Manager console.
The Agent Administrator guides you through the deployment of agents to Windows computers on your network. The Agent Administrator allows you to add Windows computers by name or by domain with matching criteria.
The Agent Administrator also allows you to find computers on which you want to deploy agents with discovery rules. For example, you can specify that Sentinel Agent Manager deploy agents to all Windows computers in a specified domain that contain a prefix in the computer name.
You can also specify computers on which to deploy agents with Light Directory Access Protocol (LDAP) queries of the Active Directory.
NOTE:
Ensure the Remote Registry Service is started on the Windows computer and central computer before attempting to deploy Windows agents. You can review services using the Component Services Administrative tool, located in the Control Panel.
Ensure the service account is a member of the local Administrators group on all agent computers that the central computer will deploy and manage.
NetIQ Corporation does not support monitoring managed agents located on the outside of a firewall from the central computer. If you want to monitor computers behind a firewall, NetIQ Corporation recommends installing unmanaged agents on your remote computers. For more information about installing unmanaged agents, see Section 4.0, Manually Installing Unmanaged Windows Agents.
To deploy managed agents to Windows computers using the Agent Administrator:
Log on to the central computer as a member of the OnePointOp ConfgAdms group.
Start the Agent Manager console in the NetIQ Sentinel Agent Manager program group.
Click Launch Agent Administrator.
In the left pane, click Managed Agents.
In the right pane, click Configure Agent Discovery Rules.
Click Add.
Select Include Computers, and then click Next.
Complete the wizard, specifying parameters that select the computers you want to discover. For more information about fields on a window, see the Help.
Select the check box and row corresponding to the rule you created with the wizard.
Click Next.
(Conditional) To deploy agents to the discovered computers at the next scan, click No.
(Conditional) To immediately deploy agents to the discovered computers, click Yes.
If you clicked Yes, select the central computer that will manage the computers.
Click Yes again to deploy agents immediately.
Click Next.
Select the discovered computers to which you want to deploy agents.
Click Next.
Click Finish.
Click Close.
NOTE:
When you deploy a managed agent to a new computer, Sentinel Agent Manager does not immediately begin receiving data from the new agent. The agent first sends a heartbeat to the central computer and receives configuration data from Sentinel Agent Manager. At the next agent heartbeat, the agent sends configuration information back to the central computer. The agent then starts sending data to the central computer.
Do not change the agent share and system share settings for the configuration group after you have installed the agents. If you change the agent share and system share settings, the system might become unstable.
For more information about installing the Windows agent manually, see Section 4.0, Manually Installing Unmanaged Windows Agents.