2.5 Audit Management Process for Agent Events

Figure 2-2 provides an overview of how the Audit Management feature works for agent events.

Figure 2-2 Agent Events

The overall workflow to capture agent events is as follows:

Step - Administrator enables the agent events: The administrator logs in to ZENworks Control Center and enables the agent events that need to be audited. For information about how to enable and configure agent events, see Section 5.2, Enabling an Agent Event.

Step - ZENworks Primary Server saves the configuration information in the ZENworks database: After the administrator enables the agent events, the ZENworks Primary Server stores this information in the ZENworks database.

Step - Agent on the managed device refreshes and queries the ZENworks Primary Server: Based on the configuration settings, the agent on the managed device refreshes at regular intervals and queries the ZENworks Primary Server to identify whether the changes need to be audited.

Step - ZENworks Server queries the ZENworks Database: The ZENworks Primary Server queries the ZENworks database, and information related to the agent event configuration settings is passed back to the agent.

Step - Agent event information is sent as an XML file to the ZENworks Primary Server: If the agent event needs to be audited, the agent sends the agent events XML file to the Primary Server.

Step - Agent event information is sent as an XML file to the Collection Folder: The Primary Server stores the agent events XML file in the Collection folder.

Step - ZENLoader collects the XML file from the Collection folder: After the XML file is stored in the Collection folder, the ZENLoader retrieves the file from the folder. It also checks for additional information related to the generated agent events in the ZENworks database.

Step - ZENLoader stores the agent event information in the audit database: The ZENLoader stores the gathered agent event information in the audit database.

Step - ZENServer retrieves the generated agent event details from the audit database and displays it in the ZENworks Control Center Dashboard: The ZENworks Primary Server retrieves the details of the generated agent events from the audit database and displays them in the ZENworks Control Center Dashboard. For information about how to access the Dashboard, see Section 5.4, Viewing a Generated Agent Event.