this post series I went through step by step into System Center Operations Manager 2007 R2 starting from “Pre-Build”, then I continued with “Installing Operations Manager Database”, followed by another post “Installing Root Management Server”, then “Configure GPO for SCOM”, then followed by “Configuring SQL Reporting Service”, then followed by “Installing Data Warehouse Database”, then followed by “Installing Audit Collection Service”, then followed by “Download and Import Management Pack”, then followed by “Discover Windows and Deploy SCOM Agents”, then followed by “Discover Linux/Unix and Deploy Agents”, and lately followed by “Configure Notification”.
In this post I will go through basic configuration in System Center Operations Manager 2007 R2, and the focus in this post will be on Configure Audit Collection Service,
Complete post & post series can be found here: http://blogs.technet.com/b/meamcs/archive/2011/09/17/operations-manager-2007-r2-installation-and-configuration-step-by-step-part-12-configure-audit-collection-service.aspx
Steps are as the following:
1. Change the ACS Default Retention Period:
User local administrator privileges to log on to the SCOM 2007 R2 Root Management Server (SCOM) [Member of "OpsMgrAdmins" Group]. This account must also has right on ACS Database
Open the SQL Server Management Studio tool and connect to the database engine
Expand the Databases folder, and select the OperationsManagerAC database
Right-click to open the context menu and select New Query
In the Query pane, type the following:
USE OperationsManagerAC UPDATE dtConfig SET Value = <number of days to retain data + 1> WHERE Id = 6
Then click Execute on the toolbar. This runs the query and then opens the Messages pane, which should read “(1 row(s) affected).”
To view the new setting, delete the previous query text from the Query pane and type then execute SELECT * FROM dtConfig. This opens the Results pane below the Query pane, Look at the value in the sixth row; it should now equal the value you entered for <number of days to retain data + 1>.
Restart the Operations Manager Audit Collection Service for this to take effect
2. Configure Audit Collection Server & Import ACS Reports:
On the System Center Operations Manager console, Select Monitoring, Operations Manager, Agent, Agent Health State
Select all the servers in the Agent State panel (right side) that you plan to enable as Audit Forwarder, then from Menu Select Action, Health Service Tasks, Enable Audit Collection
Now it is time to import Audit Reports to Operations Manager (below steps will be run on ACS Database Server): Create a C:\ACS folder on the server that is hosting Audit Reporting. Refer to the server as %COMPUTERNAME%.
Copy uploadauditreports.cmd, the Models and Reports folders from the System Center Operations Manager 2007 R2 CD (located at ReportModels\ACS\) and copy the reportingconfig.exe from the SCOM 2007 R2 CD (under the Support Tools folder) to the same folder that you created above.
On the server, open a CMD prompt, change to the "c:\tools\audit reports\acs" directory and run the following command:
UploadAuditReports "%COMPUTERNAME%" “http://%COMPUTERNAME%/reportserver" “c:\acs”
(Where “%COMPUTERNAME%” is ACS SQL DB Server Name)
And Click OK on any dialog you receive. This creates a new data source called Db Audit, uploads the reporting models Audit.smdl and Audit5.smdl and uploads all reports in the ACS\REPORTS directory
When Command Complete, open Internet Explorer and enter the following address to view the SQL Reporting Services Home page. http://localhost/Reports
Click Audit Reports in the body of the page and then click Show Details in the upper right part of the page
Open Operations Manager Console, on Operations Manager Console, under Reporting, you should see Audit Reports
Audit logs will now start being collected; this can take a considerable period of time depending on the number of logs and the size of each log.
Now you can plan, deploy and configure System Center Operations Manager 2007 R2, whish you good luck.