XYGATE Merged Audit Reference Manual

XYPRO Technology Corporation 109 Proprietary and Confidential
Chapter 6. Configuring MOVERs
MOVERs are the programs that read the product audit trails and move the records to
the XMA database. Each MOVER reads a single audit trail, so that eventually you will
have a minimum of one MOVER per product, per node. Chapter 5, “Using
XMA_MANAGER” starting on page 99 provides instructions for using the
XMA_MANAGER to manage the MOVERs.
For example, if you have XAC on three nodes, you will have at least three XAC
MOVERs. If you decide that you want Alert-Only and Collect-Only MOVERs on the
remote (non-master nodes), then you will have two XAC MOVERs per remote node:
one to alert and the other to update the database on the master node at the appointed
time.
The MOVERs also compare their audit events against Filters, which tell the MOVERs
to perform an action when they find an event that matches the Filter’s DATA Selection
Criteria.
6.1 MOVER Types
There are three types of MOVERs:.
• Alert-Only
• Collect-Only
• Regular (Combined Alert and Collect)
6.1.1 Alert-Only MOVERs
Serverclasses designated as Alert-Only will issue alerts but will not insert records into
the XMA database.
6.1.2 Collect-Only MOVERs
The Collect-Only servers were created to avoid EXPAND traffic between the remote
nodes and the master node during busy production time periods. Because the
database traffic actually happens on the master node, everybody needs to collect (and
do database inserts) based on the LCT on the master node.
Serverclasses designated as Collect-Only will “sleep” except during the designated
Collection Window. They will insert data into the XMA database but will not issue
alerts. This can be overridden. The “wake-up” time can be altered for all MOVERs
using Movers Management Menu, option 20 (page 101); the “wake-up” time can be
overridden for an individual MOVER via option 10 on the submenu that appears
(page 111).