Child pages
  • Open-AudIT Default Configuration Values and Description
Skip to end of metadata
Go to start of metadata

Below are the default values and a description for the configuration of Open-AudIT. These can all be changed to work as you desire.

To change these using the GUI in Open-AudIT navigate to menu -> Admin -> Configuration -> All

+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+
| name                               | value                                     | type   | description                                                                                                                                |
+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+
| access_token_count                 | 20                                        | number | Allow this many access tokens to be stored in the cookie.                                                                                  |
| access_token_enable                | y                                         | bool   | Should we enable access tokens for CSRF mitigation.                                                                                        |
| blessed_subnets_use                | y                                         | bool   | Should we only accept data from the blessed subnets list.                                                                                  |
| collector_check_minutes            | 15                                        | number | The default check interval for collectors.                                                                                                 |
| database_show_row_limit            | 1000                                      | number | The limit of rows to show, rather than download when exporting a database table.                                                           |
| decrypt_credentials                | y                                         | bool   | When we display or export credentials, should we decrypt them.                                                                             |
| default_network_address            |                                           | text   | The ip address or resolvable hostname used by external devices to talk to Open-AudIT.                                                      |
| delete_noncurrent                  | n                                         | bool   | Should we delete any attributes that are not present when we audit a device.                                                               |
| delete_noncurrent_netstat          | y                                         | bool   | Should we store non-current netstat data and generate change logs.                                                                         |
| delete_noncurrent_variable         | y                                         | bool   | Should we store non-current environment variable data and generate change logs.                                                            |
| discovery_create_alerts            | y                                         | bool   | Should Open-AudIT create an entry in the alert table if a change is detected.                                                              |
| discovery_ip_exclude               |                                           | text   | Populate this list with ip addresses to be excluded from discovery. IPs should be separated by a space.                                    |
| discovery_linux_script_directory   | /tmp/                                     | text   | The directory the script is copied into on the target device.                                                                              |
| discovery_linux_script_permissions | 700                                       | text   | The permissions set on the audit_linux.sh script when it is copied to the target device.                                                   |
| discovery_linux_use_sudo           | y                                         | bool   | When running discovery commands on a Linux target, should we use sudo.                                                                     |
| discovery_sunos_use_sudo           | y                                         | bool   | When running discovery commands on a SunOS target, should we use sudo.                                                                     |
| discovery_use_dns                  | y                                         | bool   | Should we use DNS for looking up the hostname and domain.                                                                                  |
| discovery_use_ipmi                 | y                                         | bool   | Should we use ipmitool for discovering management ports if ipmitool is installed.                                                          |
| display_version                    | 2.2.6                                     | text   | The version shown on the web pages.                                                                                                        |
| download_reports                   | download                                  | text   | Tells Open-AudIT to advise the browser to download as a file or display the csv, xml, json reports. Valid values are download and display. |
| graph_days                         | 30                                        | number | The number of days to report on for the Enterprise graphs.                                                                                 |
| gui_trim_characters                | 25                                        | number | When showing a table of information in the web GUI, replace characters greater than this with "...".                                       |
| homepage                           | groups                                    | text   | Any links to the default page should be directed to this endpoint.                                                                         |
| internal_version                   | 20180710                                  | number | The internal numerical version.                                                                                                            |
| log_level                          | 5                                         | number | Tells Open-AudIT which severity of event (at least) should be logged.                                                                      |
| log_retain_level_0                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 0.                                                                               |
| log_retain_level_1                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 1.                                                                               |
| log_retain_level_2                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 2.                                                                               |
| log_retain_level_3                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 3.                                                                               |
| log_retain_level_4                 | 180                                       | number | Tells Open-AudIT how many days to keep logs with severity 4.                                                                               |
| log_retain_level_5                 | 90                                        | number | Tells Open-AudIT how many days to keep logs with severity 5.                                                                               |
| log_retain_level_6                 | 30                                        | number | Tells Open-AudIT how many days to keep logs with severity 6.                                                                               |
| log_retain_level_7                 | 7                                         | number | Tells Open-AudIT how many days to keep logs with severity 7.                                                                               |
| maps_api_key                       |                                           | text   | The API key for Google Maps.                                                                                                               |
| maps_url                           | /omk/open-audit/map                       | text   | The web server address of opMaps.                                                                                                          |
| match_dbus                         | n                                         | bool   | Should we match a device based on its dbus id.                                                                                             |
| match_fqdn                         | y                                         | bool   | Should we match a device based on its fqdn.                                                                                                |
| match_hostname                     | y                                         | bool   | Should we match a device based only on its hostname.                                                                                       |
| match_hostname_dbus                | y                                         | bool   | Should we match a device based on its hostname and dbus id.                                                                                |
| match_hostname_serial              | y                                         | bool   | Should we match a device based on its hostname and serial.                                                                                 |
| match_hostname_uuid                | y                                         | bool   | Should we match a device based on its hostname and UUID.                                                                                   |
| match_ip                           | n                                         | bool   | Should we match a device based on its ip.                                                                                                  |
| match_mac                          | n                                         | bool   | Should we match a device based on its mac address.                                                                                         |
| match_mac_vmware                   | n                                         | bool   | Should we match a device based mac address even if its a known likely duplicate from VMware.                                               |
| match_serial                       | y                                         | bool   | Should we match a device based on its serial number.                                                                                       |
| match_serial_type                  | y                                         | bool   | Should we match a device based on its serial and type.                                                                                     |
| match_uuid                         | y                                         | bool   | Should we match a device based on its UUID.                                                                                                |
| modules                            |                                           | text   | The list of installed Opmantek modules.                                                                                                    |
| nmis                               | n                                         | bool   | Enable import / export to NMIS functions.                                                                                                  |
| nmis_url                           |                                           | text   | The web server address of NMIS.                                                                                                            |
| oae_license                        |                                           | text   | License status of Open-AudIT Enterprise.                                                                                                   |
| oae_product                        | Open-AudIT Community                      | text   | The name of the installed commercial application.                                                                                          |
| oae_prompt                         | 2015-06-01                                | date   | Prompt to activate a license for Open-AudIT Enterprise.                                                                                    |
| oae_url                            | /omk/open-audit                           | text   | The web server address of Open-AudIT Enterprise.                                                                                           |
| output_escape_csv                  | y                                         | bool   | Escape CSV output so Excel will not attempt to run contents.                                                                               |
| page_size                          | 1000                                      | number | The default limit of rows to retrieve.                                                                                                     |
| process_netstat_windows_dns        | n                                         | bool   | Should we keep track of Windows netstat ports used by DNS above port 1000.                                                                 |
| rss_enable                         | y                                         | bool   | Enable the RSS feed.                                                                                                                       |
| rss_url                            | https://community.opmantek.com/rss/OA.xml | text   | The RSS feed URL.                                                                                                                          |
| servers                            |                                           | text   | The servers to report to when using Agent / Collector / Server.                                                                            |
| server_ip                          |                                           | text   | The locally detected IP Addresses of this server.                                                                                          |
| uuid                               |                                           | text   | The unique identfier of this Open-AudIT server.                                                                                            |
+------------------------------------+-------------------------------------------+--------+--------------------------------------------------------------------------------------------------------------------------------------------+