-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I'm new to sentinel Log manager


Welcome to the product, and to the forums.

> i installed 1.1 SLM and edited logevent.conf (LogHost and
> LogEnginePort) in novell edirectory.


To be precise this was not done in eDirectory but in the
/etc/logevent.conf (you mentioned the file name) in the filesystem, and
while it affects eDirectory you did the eDirectory instrumentation
configuration below. This portion is referred to as configuring the
Platform Agent (PA).

> Then in iManager, i added the server in edirectory auditing and
> enabled login & login failed in novell audit section.


So the instrumentation, if installed, should be configured.

> I logged in SLM, where i saw an entry Audit Event
> Source:xx.xx.xx.xxx with Novell Identity Manager 6.1r5 as Collector
> plugin. But when i'm login into eDiretory, no audit event is coming
> into SLM. What can be the issue. Am i missing something ?


A few things come to mind. First, did you install the RPM with
'edirinst' in the name which is the instrumentation? I see you
configured it, but the last time I checked 'edirinst' was not installed
by default and without the code present it will not run. Along those
same lines if it was installed did you add an 'auditds' entry to the
/etc/opt/novell/eDirectory/conf/ndsmodules.conf file to specify that
auditds should auto-load? Is it, now, loaded (`ndstrace -c modules`) or
even present (not present if not installed.... not loaded if not
specified above in the ndsmodules.conf file)? Finally, is this a
multi-server tree and, if so, are logging into the server that you
configured or possibly (because NCP tries to do what is best without
telling you) to another server that does not have auditing configured?

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJQIQnqAAoJEF+XTK08PnB598UQAKjIKzZpyB 3rtJaFz3UOWWAn
dzHVcCpwhvINXSp5PGV5KtKD/d9TS+RD/t/OL2jiJFqyaIdCBlekcI1ru9PJI0n6
ruUCfbvdYUVNZ+J347J5dAqMl/tZWrFRfBWqV5rqpU9JOz+kMbBcPbkI47KAP387
QcuRDxdaHzZQAtgIyEyc2N8W0Gw3+udqnVW1X7/5vEUcy4VSKePrxlBLZpOg1OwL
FoDYM5GDMshvfuXMW1SoQgOUr/JNmvZcVwSAAoCm4dO1g7EU7+opnchUtXwZfQrp
5Nm5YZ3Tn0trbO/yhGc/Ahob5mI4YOSTU7YgbwZ9FiuXUOk9z3PFUYMJWWmIps2W
zwvNn0gqQhy+FGujDKxe0gUUaecfjHXakqRVsatBmcmngcYCLW 1OhPBeA5/nW+m7
t8R5OcXMLCdGAlHXAuilBz7BRcWTUoGDGOHwWWmuoWo6AVYHFi b0iCwSgpfclo7v
lvEeWLWhWLITNi7Ir7mmfLIPUiz+T4+/oX31U9Cltc7TRbvgEYcxCw3GzC+YKj55
ufDJZtkyoTF3BSh7VJpkTK5v9V/oVghWSkrb1wqWCbKiuXJDsx1I9JmPswBYCzjy
BlG+Nmy4ReDXYHc7/IUUsAyOE8xfKsl8p8YPOYrJjEcBHoNAHxHB3+Qm7NRnU1kv
ZY9f6DJRr9AZm1l+SCQR
=q35W
-----END PGP SIGNATURE-----