ACS Support for Cross Platform Operation Systems Workflow

  • 發行項

適用於: Operations Manager 2007 R2

The Cross Platform ACS workflow is integrated with the Windows ACS workflow. After the audit data resides in the Windows Security Event log, the ACS Collector and the ACS database process all audit data similarly.

描述 ACS 工作流程的圖形

  1. The ACS management pack defines the Syslog audit events to be collected.

  2. The Cross Platform log file data source module communicates with the Cross Platform agent for log file monitoring.

  3. The Cross Platform agent and log file provider reads the log file for audit events and returns those that match the filter defined through the ACS management packs.

  4. The Cross Platform Parsing and Security Event Log Write Action module parses the Syslog messages for storage in the ACS database. The information is securely written to the Windows Security Event log (WSEL).

  5. The ACS Forwarder reads the SEL and sends it to the ACS Collector. The audit event is inserted into the ACS database.