10.2 Specifying settings to collect operation logs for storage on a site server
This section describes how to specify settings to collect operation logs from a computer and store them on a site server.
Note that a site server for storing operation logs must be built in advance.
- Important note
-
To collect operation logs, the agent must be installed in advance on a computer from which operation logs are to be collected.
- Tip
-
If you want to collect operation logs for storage only on a management server, this setting is not required.
To specify settings for collecting operation logs for storage on a site server:
-
Specify a server configuration.
For each network segment, specify a site server on which to store operation logs.
-
In the security policy, specify settings to obtain operation logs.
You can select the type of operation logs to obtain. If you want to detect suspicious operations, you can also specify detection conditions.
-
Assign the security policy to a group or a computer.
The operation logs of a computer to which the security policy has been assigned are collected and stored on a site server.
Related Topics: