...
To change these using the GUI in Open-AudIT navigate to menu -> Admin -> Configuration -> All
| Code Block |
|---|
+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+ | name| access_token_count | 20 | number | Allow this many access tokens to be stored in the cookie. | | access_token_enable value | y | type | description | bool | Should we enable access tokens for CSRF mitigation. | +------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+ | access_token_count| | blessed_subnets_use | y | bool | Should we only accept data from the blessed subnets list. | 20 | | collector_check_minutes | number5 | Allow this many access tokens to be stored in the cookie. | number | The default check interval for collectors. | | access_token_enable | y | bool | | Shouldcreate_change_log we enable access tokens for CSRF mitigation. | y | bool | Should Open-AudIT create an entry in the change log table if a change is detected. | | blessed_subnets_use | y | | create_change_log_bios | bool | Should we only accept data from the| blessedy subnets list. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the bios table. | | collector_check_minutes | 15 | | create_change_log_disk | y | number | The default check interval for collectors. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the disk table. | | databasecreate_showchange_row_limitlog_dns | y 1000 | number | Thebool limit of rows| to show, rather than download when exporting a database table. Should Open-AudIT create an entry in the change log table if a change is detected in the dns table. | | decrypt_credentials create_change_log_file | y | bool | WhenShould weOpen-AudIT displaycreate oran exportentry credentials,in shouldthe wechange decryptlog them.table if a change is detected in the file table. | | create_change_log_ip | | default_network_addressy | | bool | Should Open-AudIT create an entry in the change log |table textif a change |is Thedetected ipin addressthe or resolvable hostname used by external devices to talk to Open-AudITip table. | | delete_noncurrent create_change_log_log | ny | bool | Should weOpen-AudIT deletecreate anyan attributesentry thatin arethe notchange presentlog whentable we auditif a device.change is detected in the log table. | | deletecreate_change_noncurrent_netstatlog_memory | y | bool | Should weOpen-AudIT storecreate non-currentan netstatentry datain and generatethe change logs.log table if a change is detected in the memory table. | | | delete_noncurrent_variable| create_change_log_module | y | bool | Should we store non-current environment variable data and generateOpen-AudIT create an entry in the change logs.log table if a change is detected in the module table. | | discoverycreate_change_createlog_alertsmonitor | y | bool | Should Open-AudIT create an entry in the change alertlog table if a change is detected. in the monitor table. | | create_change_log_motherboad | |y discovery_ip_exclude | | bool | Should Open-AudIT create an entry in the change log table if a change |is textdetected in the |motherboard Populatetable. this list with ip addresses to be excluded from discovery. IPs should be separated by a space. | | discoverycreate_linuxchange_scriptlog_directorynetstat | /tmp/ | y | text | The directory the script is copied into on the| targetbool device. | Should Open-AudIT create an entry in the change log table if a change is detected in the netstat table. | | create_change_log_netstat_dynamic | n | | discovery_linux_script_permissions | 700 | bool | textShould Open-AudIT create |an Theentry permissionsin setthe onchange the audit_linux.sh script when itlog table if a change is copieddetected toin the targetnetstat device.table and the port is 49152 or greater. | | create_change_log_netstat_registered | n | | discovery_linux_use_sudo | ybool | Should Open-AudIT create an entry in the change log table if a change is detected in the netstat table and the port is in the range of 1024 to 49151. | | create_change_log_netstat_well_known | y | bool | When running discovery commands on a Linux target, should we use sudo. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the netstat table and the port is 1023 or lower. | | discoverycreate_sunoschange_uselog_sudonetwork | y | bool | WhenShould runningOpen-AudIT discoverycreate commandsan onentry in athe SunOSchange target,log shouldtable weif usea sudo.change is detected in the network table. | | create_change_log_nmap | | discovery_use_dnsy | y | bool | Should Open-AudIT create an entry in the change log table if a change is |detected boolin the nmap |table. Should we use DNS for looking up the hostname and domain. | | create_change_log_optical | y | | discovery_use_ipmi | bool | Should |Open-AudIT ycreate an entry in the change log table if a change is detected in the optical table. | bool | Should we use ipmitool for discovering management ports if ipmitool is installed. | | create_change_log_pagefile | y | bool | display_version Should Open-AudIT create an entry in the change log table if a change is detected in the pagefile table. | 2.2.6 | | textcreate_change_log_partition | They version shown on the web pages. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the partition table. | | download_reportscreate_change_log_policy | y | download | textbool | TellsShould Open-AudIT to advisecreate an entry in the browserchange tolog downloadtable asif a filechange is ordetected displayin the csv, xml, json reportspolicy table. Valid values are download and display. | | graph_days | 30 | | create_change_log_print_queue | y | number | The number of days to report on for the Enterprise graphs. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the print_queue table. | | guicreate_change_trimlog_charactersprocessor | y | 25 | bool | numberShould |Open-AudIT Whencreate showingan a table of information entry in the webchange GUI,log replacetable charactersif greatera thanchange thisis with "...". detected in the processor table. | | homepage | | create_change_log_route | y | groups | textbool | AnyShould linksOpen-AudIT tocreate thean defaultentry pagein shouldthe bechange directedlog totable thisif endpoint.a change is detected in the route table. | | create_change_log_san | | internal_versiony | 20180710 | bool | Should Open-AudIT create an entry in the change |log numbertable |if Thea internalchange numericalis version.detected in the san table. | | create_change_log_scsi | y | | log_level | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the |scsi 5table. | number | Tells Open-AudIT which severity of event (at| least) should be logged.| create_change_log_server | y | bool | Should Open-AudIT create an entry in the change log table if a |change | log_retain_level_0 is detected in the server table. | 180 | | create_change_log_server_item | number | Tells Open-AudIT how| manyy days to keep logs with severity 0. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the server_item table. | | log_retain_level_1 | 180 | | create_change_log_service | y | number | Tells Open-AudIT how many days to keep logs with severity 1. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the service table. | | logcreate_retainchange_levellog_2share | y | 180 | bool | number | TellsShould Open-AudIT howcreate manyan daysentry toin keepthe logschange withlog severitytable 2.if a change is detected in the share table. | | create_change_log_software | y | | log_retain_level_3 | 180 | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the software table. | number | Tells Open-AudIT how many days to keep logs with severity 3. | | create_change_log_software_key | y | | log_retain_level_4bool | Should Open-AudIT create an entry in the change log table if a change |is 180detected in the software_key table. | number | Tells Open-AudIT how many days| to keep logs with severity 4.| create_change_log_sound | y | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the sound table. | | log_retain_level_5 | 90 | | create_change_log_task | y number | Tells Open-AudIT how many days to keep logs with severity 5. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the task table. | | log_retain_level_6 | 30 | create_change_log_user | y | number | Tells Open-AudIT how many days to keep logs with severity 6. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the user table. | | create_change_log_retainuser_level_7group | y | 7 | bool | numberShould | Tells Open-AudIT howcreate manyan daysentry toin keepthe logschange withlog severitytable 7.if a change is detected in the user_group table. | | create_change_log_variable | n | | maps_api_key | | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the variable table. | text | The API key for Google Maps. | | create_change_log_video | y | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the video table. | | maps_url | /omk/open-audit/map | | create_change_log_vm | text | They web server address of opMaps. | bool | Should Open-AudIT create an entry in the change log table if a change is detected in the vm table. | | match_dbus | | create_change_log_windows | ny | bool | Should weOpen-AudIT matchcreate aan deviceentry basedin onthe itschange dbuslog id.table if a change is detected in the windows table. | | database_show_row_limit | 1000 | | match_fqdn | number | The limit of rows to show, |rather ythan download when exporting a database table. | bool | Should we match a device based on its fqdn. | | decrypt_credentials | y | bool | When we display or export credentials, should |we | match_hostnamedecrypt them. | y | bool | Should we match a device based only on its hostname. | | default_network_address | http://127.0.0.1./open-audit/ | text | The URL used by external devices to talk to Open-AudIT. | | match_hostname_dbus | y | bool | | Shoulddelete_noncurrent we match a device based on its hostname and dbus id. | n | bool | Should we delete all non-current data. | | match_hostname_serial | y | bool | Should we match a device based on its hostname and serial. | | delete_noncurrent_bios | n | bool | | match_hostname_uuidShould we delete non-current bios data. | y | bool | Should we match a device based on its hostname and UUID. | | delete_noncurrent_disk | n | | match_ip | bool | Should we delete non-current disk |data. n | bool | Should we match a device based on its ip. | | delete_noncurrent_dns | n | | match_mac | bool | Should we delete non-current dns |data. n | bool | Should we match a device based on its mac address. | | delete_noncurrent_file | n | | match_mac_vmware | bool | nShould we delete non-current file data. | bool | Should we match a device based mac address even if its a known likely duplicate from VMware. | | match_serial | | delete_noncurrent_ip | yn | bool | Should we matchdelete anon-current deviceip baseddata. on its serial number. | | match_serial_type | y | | delete_noncurrent_log | n | bool | Should we match a device based on its serial and type. | bool | Should we delete non-current log data. | | match_uuid | y | | delete_noncurrent_memory | n | bool | Should we match a device based on its UUID. | bool | Should we delete non-current memory data. | | modules | | | delete_noncurrent_module | n | text | The list of installed Opmantek modules. | bool | Should we delete non-current module data. | | nmis | | ndelete_noncurrent_monitor | n | bool | Enable import / export to NMIS| functions.bool | Should we delete non-current monitor data. | | nmis_url | | delete_noncurrent_motherboard | n | textbool | TheShould webwe serverdelete addressnon-current ofmotherboard NMISdata. | | delete_noncurrent_netstat | | oae_license | y | | bool | Should we delete non-current netstat data. | text | License status of Open-AudIT Enterprise. | | delete_noncurrent_network | | oae_product | n | Open-AudIT Community | textbool | TheShould namewe ofdelete thenon-current installednetwork commercialdata. application. | | oae_prompt | | delete_noncurrent_nmap | 2015-06-01 | n | date | Prompt to activate a license for Open-AudIT Enterprise. | bool | Should we delete non-current nmap data. | | oae_url | /omk/open-audit | | delete_noncurrent_optical | n | text | The web server address of Open-AudIT Enterprise. | bool | Should we delete non-current optical data. | | output_escape_csv | y | | delete_noncurrent_pagefile | bool | Escapen CSV output so Excel will not attempt to run contents. | bool | Should we delete non-current pagefile data. | | page_size | 1000 | number | The default limit of rows to retrieve.| delete_noncurrent_partition | n | bool | Should we delete non-current partition data. | | process_netstat_windows_dns | n | bool | Should we keep track of Windows| netstat ports used by DNS above port 1000.| delete_noncurrent_policy | n | bool | Should we delete non-current policy data. | | rss_enable | y | bool | Enable the RSS feed. | | delete_noncurrent_print_queue | n | bool | Should we delete non-current print_queue data. | | rss_url | https://community.opmantek.com/rss/OA.xml | text | The RSS feed URL. | | delete_noncurrent_processor | n | bool | Should we delete non-current processor data. | | servers | | text | The servers to report| to when using Agent / Collector / Server.| delete_noncurrent_route | n | bool | Should we delete non-current route data. | | server_ip | | | textdelete_noncurrent_san | Then locally detected IP Addresses of this server. | bool | Should we delete non-current san data. | | uuid | | | delete_noncurrent_scsi | textn | The unique identfier of this Open-AudIT server. | bool | Should we delete non-current scsi data. | +------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+ | | delete_noncurrent_server | n | bool | Should we delete non-current server data. | | delete_noncurrent_server_item | n | bool | Should we delete non-current server_item data. | | delete_noncurrent_service | n | bool | Should we delete non-current service data. | | delete_noncurrent_share | n | bool | Should we delete non-current share data. | | delete_noncurrent_software | n | bool | Should we delete non-current software data. | | delete_noncurrent_software_key | n | bool | Should we delete non-current software_key data. | | delete_noncurrent_sound | n | bool | Should we delete non-current sound data. | | delete_noncurrent_task | n | bool | Should we delete non-current task data. | | delete_noncurrent_user | n | bool | Should we delete non-current user data. | | delete_noncurrent_user_group | n | bool | Should we delete non-current user_group data. | | delete_noncurrent_variable | y | bool | Should we delete non-current variable data. | | delete_noncurrent_video | n | bool | Should we delete non-current video data. | | delete_noncurrent_vm | n | bool | Should we delete non-current vm data. | | delete_noncurrent_windows | n | bool | Should we delete non-current windows data. | | device_auto_delete | n | bool | Should we delete the device data completely from the database when the device status is set to Deleted. | | discovery_default_scan_option | 1 | number | The default discovery options for Nmap. | | discovery_ip_exclude | | text | Populate this list with ip addresses to be excluded from discovery. IPs should be separated by a space. | | discovery_limit | 20 | number | The maximum number of concurrent discoveries we should run. | | discovery_linux_script_directory | /tmp/ | text | The directory the script is copied into on the target device. | | discovery_linux_script_permissions | 700 | text | The permissions set on the audit_linux.sh script when it is copied to the target device. | | discovery_linux_use_sudo | y | bool | When running discovery commands on a Linux target, should we use sudo. | | discovery_override_nmap | n | bool | Override the detction of Nmap to enable discoveries. | | discovery_pid | | number | The discovery queue process pid. | | discovery_route_retrieve_limit | 500 | number | When discovering a device using SNMP, do not retrieve the route table if it contains more than this number of entries. | | discovery_ssh_timeout | 300 | number | Timeout duration (in seconds) when discovering a device via SSH. | | discovery_sudo_path | | text | Optional hardcoded path to sudo executable. Comma seperated for multiple paths. | | discovery_sunos_use_sudo | y | bool | When running discovery commands on a SunOS target, should we use sudo. | | discovery_use_dns | y | bool | Should we use DNS for looking up the hostname and domain. | | discovery_use_ipmi | y | bool | Should we use ipmitool for discovering management ports if ipmitool is installed. | | discovery_use_vintage_service | n | bool | On Windows, use the old way of running discovery with the Apache service account. | | display_version | 3.3.0 | text | The version shown on the web pages. | | download_reports | y | bool | Tells Open-AudIT to advise the browser to download as a file or display the csv, xml, json reports. | | graph_days | 30 | number | The number of days to report on for the Enterprise graphs. | | gui_trim_characters | 25 | number | When showing a table of information in the web GUI, replace characters greater than this with "...". | | homepage | groups | text | Any links to the default page should be directed to this endpoint. | | internal_version | 20191010 | number | The internal numerical version. | | log_level | 5 | number | Tells Open-AudIT which severity of event (at least) should be logged. | | log_retain_level_0 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 0. | | log_retain_level_1 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 1. | | log_retain_level_2 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 2. | | log_retain_level_3 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 3. | | log_retain_level_4 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 4. | | log_retain_level_5 | 90 | number | Tells Open-AudIT how many days to keep logs with severity 5. | | log_retain_level_6 | 30 | number | Tells Open-AudIT how many days to keep logs with severity 6. | | log_retain_level_7 | 7 | number | Tells Open-AudIT how many days to keep logs with severity 7. | | maps_api_key | | text | The API key for Google Maps. | | maps_url | /omk/open-audit/map | text | The web server address of opMaps. | | match_dbus | n | bool | Should we match a device based on its dbus id. | | match_dns_fqdn | n | bool | Should we match a device based on its DNS fqdn. | | match_dns_hostname | n | bool | Should we match a device based on its DNS hostname. | | match_fqdn | y | bool | Should we match a device based on its fqdn. | | match_hostname | y | bool | Should we match a device based only on its hostname. | | match_hostname_dbus | y | bool | Should we match a device based on its hostname and dbus id. | | match_hostname_serial | y | bool | Should we match a device based on its hostname and serial. | | match_hostname_uuid | y | bool | Should we match a device based on its hostname and UUID. | | match_ip | n | bool | Should we match a device based on its ip. | | match_ip_no_data | y | bool | Should we match a device based on its ip if we have an existing device with no data. | | match_mac | y | bool | Should we match a device based on its mac address. | | match_mac_vmware | n | bool | Should we match a device based mac address even if its a known likely duplicate from VMware. | | match_serial | y | bool | Should we match a device based on its serial number. | | match_serial_type | y | bool | Should we match a device based on its serial and type. | | match_sysname | y | bool | Should we match a device based only on its SNMP sysName. | | match_sysname_serial | y | bool | Should we match a device based only on its SNMP sysName and serial. | | match_uuid | y | bool | Should we match a device based on its UUID. | | nmis | n | bool | Enable import / export to NMIS functions. | | nmis_url | | text | The web server address of NMIS. | | oae_license | | text | License status of Open-AudIT Enterprise. | | oae_product | | text | The name of the installed commercial application. | | oae_prompt | 2001-01-01 | date | Prompt to activate a license for Open-AudIT Enterprise. | | oae_url | /omk/open-audit | text | The web server address of Open-AudIT Enterprise. | | output_escape_csv | y | bool | Escape CSV output so Excel will not attempt to run contents. | | page_size | 1000 | number | The default limit of rows to retrieve. | | process_netstat_windows_dns | n | bool | Should we keep track of Windows netstat ports used by DNS above port 1000. | | queue_count | 0 | number | The current number of concurrent device scans running. | | queue_limit | 20 | number | The maximum number of concurrent device scans we should run. | | rss_enable | y | bool | Enable the RSS feed. | | rss_url | https://community.opmantek.com/rss/OA.xml | text | The RSS feed URL. | | servers | | text | The servers to report to when using Agent / Collector / Server. | | server_ip | | text | The locally detected IP Addresses of this server. | | uuid | unique per installation | text | The unique identfier of this Open-AudIT server. |