Skip to end of banner
Go to start of banner

Open-AudIT Default Configuration Values and Description

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 15 Next »

Below are the default values and a description for the configuration of Open-AudIT. These can all be changed to work as you desire.

To change these using the GUI in Open-AudIT navigate to menu -> Admin -> Configuration -> All

+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+
| name                               | value                                     | type   | description                                                                                                                                |
+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+
| access_token_count                 | 20                                        | number | Allow this many access tokens to be stored in the cookie.                                                                                  |
| access_token_enable                | y                                         | bool   | Should we enable access tokens for CSRF mitigation.                                                                                        |
| blessed_subnets_use                | y                                         | bool   | Should we only accept data from the blessed subnets list.                                                                                  |
| collector_check_minutes            | 15                                        | number | The default check interval for collectors.                                                                                                 |
| database_show_row_limit            | 1000                                      | number | The limit of rows to show, rather than download when exporting a database table.                                                           |
| decrypt_credentials                | y                                         | bool   | When we display or export credentials, should we decrypt them.                                                                             |
| default_network_address            |                                           | text   | The ip address or resolvable hostname used by external devices to talk to Open-AudIT.                                                      |
| delete_noncurrent                  | n                                         | bool   | Should we delete any attributes that are not present when we audit a device.                                                               |
| delete_noncurrent_netstat          | y                                         | bool   | Should we store non-current netstat data and generate change logs.                                                                         |
| delete_noncurrent_variable         | y                                         | bool   | Should we store non-current environment variable data and generate change logs.                                                            |
| discovery_create_alerts            | y                                         | bool   | Should Open-AudIT create an entry in the alert table if a change is detected.                                                              |
| discovery_ip_exclude               |                                           | text   | Populate this list with ip addresses to be excluded from discovery. IPs should be separated by a space.                                    |
| discovery_linux_script_directory   | /tmp/                                     | text   | The directory the script is copied into on the target device.                                                                              |
| discovery_linux_script_permissions | 700                                       | text   | The permissions set on the audit_linux.sh script when it is copied to the target device.                                                   |
| discovery_linux_use_sudo           | y                                         | bool   | When running discovery commands on a Linux target, should we use sudo.                                                                     |
| discovery_sunos_use_sudo           | y                                         | bool   | When running discovery commands on a SunOS target, should we use sudo.                                                                     |
| discovery_use_dns                  | y                                         | bool   | Should we use DNS for looking up the hostname and domain.                                                                                  |
| discovery_use_ipmi                 | y                                         | bool   | Should we use ipmitool for discovering management ports if ipmitool is installed.                                                          |
| display_version                    | 2.2.6                                     | text   | The version shown on the web pages.                                                                                                        |
| download_reports                   | download                                  | text   | Tells Open-AudIT to advise the browser to download as a file or display the csv, xml, json reports. Valid values are download and display. |
| graph_days                         | 30                                        | number | The number of days to report on for the Enterprise graphs.                                                                                 |
| gui_trim_characters                | 25                                        | number | When showing a table of information in the web GUI, replace characters greater than this with "...".                                       |
| homepage                           | groups                                    | text   | Any links to the default page should be directed to this endpoint.                                                                         |
| internal_version                   | 20180710                                  | number | The internal numerical version.                                                                                                            |
| log_level                          | 5                                         | number | Tells Open-AudIT which severity of event (at least) should be logged.                                                                      |
| log_retain_level_0                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 0.                                                                               |
| log_retain_level_1                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 1.                                                                               |
| log_retain_level_2                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 2.                                                                               |
| log_retain_level_3                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 3.                                                                               |
| log_retain_level_4                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 4.                                                                               |
| log_retain_level_5                 | 90                                        | number | Tells Open-AudIT how many days to keep logs with severity 5.                                                                               |
| log_retain_level_6                 | 30                                        | number | Tells Open-AudIT how many days to keep logs with severity 6.                                                                               |
| log_retain_level_7                 | 7                                         | number | Tells Open-AudIT how many days to keep logs with severity 7.                                                                               |
| maps_api_key                       |                                           | text   | The API key for Google Maps.                                                                                                               |
| maps_url                           | /omk/open-audit/map                       | text   | The web server address of opMaps.                                                                                                          |
| match_dbus                         | n                                         | bool   | Should we match a device based on its dbus id.                                                                                             |
| match_fqdn                         | y                                         | bool   | Should we match a device based on its fqdn.                                                                                                |
| match_hostname                     | y                                         | bool   | Should we match a device based only on its hostname.                                                                                       |
| match_hostname_dbus                | y                                         | bool   | Should we match a device based on its hostname and dbus id.                                                                                |
| match_hostname_serial              | y                                         | bool   | Should we match a device based on its hostname and serial.                                                                                 |
| match_hostname_uuid                | y                                         | bool   | Should we match a device based on its hostname and UUID.                                                                                   |
| match_ip                           | n                                         | bool   | Should we match a device based on its ip.                                                                                                  |
| match_mac                          | n                                         | bool   | Should we match a device based on its mac address.                                                                                         |
| match_mac_vmware                   | n                                         | bool   | Should we match a device based mac address even if its a known likely duplicate from VMware.                                               |
| match_serial                       | y                                         | bool   | Should we match a device based on its serial number.                                                                                       |
| match_serial_type                  | y                                         | bool   | Should we match a device based on its serial and type.                                                                                     |
| match_uuid                         | y                                         | bool   | Should we match a device based on its UUID.                                                                                                |
| modules                            |                                           | text   | The list of installed Opmantek modules.                                                                                                    |
| nmis                               | n                                         | bool   | Enable import / export to NMIS functions.                                                                                                  |
| nmis_url                           |                                           | text   | The web server address of NMIS.                                                                                                            |
| oae_license                        |                                           | text   | License status of Open-AudIT Enterprise.                                                                                                   |
| oae_product                        | Open-AudIT Community                      | text   | The name of the installed commercial application.                                                                                          |
| oae_prompt                         | 2015-06-01                                | date   | Prompt to activate a license for Open-AudIT Enterprise.                                                                                    |
| oae_url                            | /omk/open-audit                           | text   | The web server address of Open-AudIT Enterprise.                                                                                           |
| output_escape_csv                  | y                                         | bool   | Escape CSV output so Excel will not attempt to run contents.                                                                               |
| page_size                          | 1000                                      | number | The default limit of rows to retrieve.                                                                                                     |
| process_netstat_windows_dns        | n                                         | bool   | Should we keep track of Windows netstat ports used by DNS above port 1000.                                                                 |
| rss_enable                         | y                                         | bool   | Enable the RSS feed.                                                                                                                       |
| rss_url                            | https://community.opmantek.com/rss/OA.xml | text   | The RSS feed URL.                                                                                                                          |
| servers                            |                                           | text   | The servers to report to when using Agent / Collector / Server.                                                                            |
| server_ip                          |                                           | text   | The locally detected IP Addresses of this server.                                                                                          |
| uuid                               |                                           | text   | The unique identfier of this Open-AudIT server.                                                                                            |
+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+

  • No labels