4.2 Enabling a Change Event

To audit a change event, you must first enable the event in ZENworks Control Center. You can enable the event at the zone or device level. An event that is enabled at the zone level applies to all devices in the zone, and an event that is enabled at the device level applies to only the selected device.

  1. Log in to ZENworks Control Center.

  2. (Zone) To enable events at the zone, click Configuration > Management Zone Settings > Audit Management.

    or

    (Devices) To enable events at the device, click Devices > Managed Devices. Locate the device in the Servers or Workstations folders, click the device object to display its properties, then click Settings > Audit Management.

  3. Click Events Configuration to display the Events Configuration dialog page.

  4. In the Change Events tab, click Add to display the Add Change Events dialog box.

    For information about the change event categories, see Section 4.1, Change Event Categories.

    For this example, we are using the Bundle Assignment Modified event. However, depending on which event you want to enable, you can select the appropriate event category.

  5. To select the Bundle Assignment Modified event, click Change Events > ZENworks System > Bundles.

  6. Select the Bundle Assignment Modified check box.

  7. Specify the following information for the Event Settings:

    • Event Classification: Based on the importance of the event, select Critical, Major, or Informational.

    • Days to Keep: Indicate the number of days to keep the event before purging it.

      For information about purging audit events, see Section 6.1, Scheduling Audit Purge.

    • Notification Types: Specify whether the notification should be sent via email, SNMP Trap, a local log message, or a syslog message should be sent when the event occurs. If you select Log message to a local file, you must configure the local log file settings. For more information, see Section 4.6, Local Audit Logging.

      Using the email option, you can send notifications to multiple email addresses. Each email address should be separated with a comma.

      You can also select multiple notification types. For more information, see Using Message Logging.

  8. Click OK to add the event.

You can edit or delete an event by selecting the event in the Event Configuration page and clicking Edit or Delete from the menu bar. To select multiple events at a time, press Ctrl and click to select.

You can also search for events that have been enabled by using the Search field in the Events Configuration page. For more information about how to search for events, see Section 6.2, Searching for Events.