The Microsoft* SQL Server channel allows the logging server to log events to a Microsoft SQL Server database. The logging server can use the Microsoft SQL Server channel to create the central data store or a filtered database.
NOTE: This channel driver is used only on platforms where Microsoft SQL Server can run natively. When running the Secure Logging Server on NetWare®, create a JDBC* channel to connect to the Microsoft SQL Server.
The space you need for your database depends on a number of factors. These include, but are not limited to, how many events per second you are storing and how long you want to keep the data. For the data store, a system that generates around 80 events per second with an average event size of 80 bytes consumes approximately 500 MB of disk space for the database table and 150 MB for the index in a 24-hour period.
IMPORTANT: Native connections to a Microsoft SQL server database are available only when running the Secure Logging Server on a Windows* platform. JDBC must be used to connect to a Microsoft SQL Server database from other platforms.
When the SQL Server Channel object configuration is loaded in the logging server's memory, the SQL Server channel driver, lgdmssql, automatically creates the following table structure for the SQL Server data store:
NOTE: The table name is defined in the Microsoft SQL Channel object configuration page. The default table name is NAUDITLOG.
To create this table manually, run the following, replacing table_name with the name you want to use for the table:
CREATE TABLE IF NOT EXISTS table_name
(SourceIP INT,
ClientTimestamp INT,
ClientMS INT,
ServerTimestamp INT,
SessionID INT,
Component VARCHAR(255),
EventID INT,
Severity INT,
Grouping INT,
Originator VARCHAR(255),
OriginatorType INT,
Target VARCHAR(255),
TargetType INT,
SubTarget VARCHAR(255),
Text1 VARCHAR(255),
Text2 VARCHAR(255),
Text3 VARCHAR(255),
Value1 INT,
Value2 INT,
Value3 INT,
MIMEType INT,
DataSize INT,
Data MEDIUMBLOB,
Signature VARCHAR(255),
INDEX(ClientTimestamp),
INDEX(EventID))
TYPE=MYISAM
A trademark symbol (®, , etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.