Getting Started
- System Requirements
- Installation
- Registration
- Version Support Policy
- Assign Service Logon As Credentials
Agent-Based Management
Data Providers
- Data Provider Properties
- SQLite Properties
- MySQL Properties
- Microsoft SQL Server Properties
- File System Properties
Directory Services
Event Log Archiving for JSIG and CMMC Compliance
Auditing
- Audit Work Items
- Self-Auditing
- Group Policy Auditing
Hosts
- Adding Hosts
- Host Properties
- Batch Update Hosts
- Agent Properties
- Logon As Properties
- SFTP Properties
- FTP/S Properties
- SNMP Device Connection Properties
- WMI
- Contact
- Exclusions
- Inventory
- Docker
- Host Assignments
Templates
- Template Properties
- Batch Update Templates
- Assign Templates
- Log Management Templates
- SCAP Compliance Monitor
- File and Directory Monitor Templates
- Windows Monitor Templates
- Windows Management Instrumentation (WMI) Templates
- SSL Certificate Monitor Templates
- Email Monitor Templates
- SNMP Monitor Templates
- Windows Accounts Templates
Monitors
- Monitor Hierarchy
- Temporarily Suppress Monitors Actions
Reports
- Report Properties
- Artificial Intelligence Reports
  - AI Anomaly Detection Report
    - AI Anomaly Detection Report (Template Triggers)
- Security Reports
- Generic Log Reports
- SIEM Report
- SIEM Chart Report
- Azure Active Directory Audit Log Report
- Event Log Report
- SNMP Trap Report
- Syslog Report
- Databse Log Report
- Event Log Summary Report
File and Permission Reports
- File and Directory Access Permissions Report
- Duplicate Files Report
- File Activity Report
- Largest Files Report
- Sorted Files Report
Summary Reports
- Host Inventory Report
- Summary Report
- Collection Report
- Hash Check Reports
Auto-Configurators
Filters
- Simple Filters
- Complex Filters
Actions
- Database Actions
- Desktop Actions
- Email Actions
- Event Log Actions
- Executable Actions
- File Actions
- IIS IP Address Restriction Actions
- Microsoft Teams Actions
- PowerShell Actions
- Report Actions
- Service Actions
- SMS Actions
- SNMP Trap Actions
- Syslog Actions
- Template Actions
- IIS IP Address Restriction Actions
- Action Variables
Schedules
- Fixed Schedules
- Range Schedules
- Real-Time Schedules
Environment Variables
Options
- Email Settings
- Security Settings
- Syslog Server Settings
- SNMP Trap Server Settings
- Log Viewer Settings
- Web Proxy Settings
- Miscellaneous Settings
Account Lockout Monitoring and Reporting
Merging Logs
SNMP
- SNMP Browser
SSH Shell
Syslog
Exporting and Importing Configuration Objects
Shared Views
- Active Directory User and Group Filters
- Assign Actions
- Assign Azure Audit Logs
- Assign Consolidated Logs
- Assign Directories
- Assign Disks
- Assign Event Logs
- Assign Files
- Assign Services
- Assign Shares
- Auto-Config Host Assignment Properties
- Define CSV and W3C Log Entry Columns
- Define Log Entry Columns
- Define Log Entry Columns with Regular Expressions
- Executable Status
- Executable Timeline
- Explicitly Assigned Logs
- File Explorer
- General Executable Properties
- Report Columns
- Report Date/Time Ranges
- Report Security Event Log Filters
- Select Folder or File
- Target Files and Sub-Directories
Command Line Interface
Server Configuration
Agent Configuration
Troubleshooting
- Arithmetic Overflow
- Access Denied
- MySQL: Fatal error encountered during command execution
- Invalid Class
- No Such Interface Supported
- Quota Violation
- The File Exists Errors
- The Interface is Unknown
- The RPC Server is Unavailable
- NetBIOS Errors
Terminology

Audting

Server Manager includes both compliance auditing and self-auditing features.

Compliance auditing is the process of reviewing centralized Security Audit Log Reports, flagging issues, re-assigning, rejecting, accepting and completing the report.
Self-auditing is the process of reviewing audit controls for timing and accuracy. Audit controls include, for example, Event Log and RedHat Audit Log Backup Templates. Accuracy is referred to as the process of executing the audit contols, for example, the frequency and timing log backups occur.

Server Manager enables Information Systems Security Managers (ISSM) to complete end-to-end auditing directly within the Management Console using a combination of Audit Work Items and Self-Auditing Reports.

Component	Description
Audit Work Items	Enables ISSMs to generate daily, weekly and monthly work items that include output report content and tasks to be reviewed and completed.
Self-Auditing Reports	Enables ISSMs and network administrators to audit Corner Bowl Server Manager user activity and scheduled Template and Report execution accuracy. All write operations, and, optionally, executed Reports and Templates are written to the CBSAudit Event Log. Server Manager automtically parses and consolidates the log entries into the centralized log database.

How to view and manage audting features

From the Explorer View, expand the root Auditing node.
Once expanded, find the following 5 nodes:

Tree Node	Description
Audit Work Items	Select this node to manage Audit Work Items.
Reports	Filters the CBSAudit Event Log for all Report activity and configuration updates.
Templates and Monitors	Filters the CBSAudit Event Log for all Monitor activity and Template configuration updates.
Auto-Configurators	Filters the CBSAudit Event Log for all Auto-Configurator activity and configuration updates.
Actions	Filters the CBSAudit Event Log for all Action activity and configuration updates.

Auditing Explorer View Tree Nodes

Table of Contents

Audting

How to view and manage audting features