...
To change these using the GUI in OpenAudIT navigate to menu -> Admin -> Community -> All Configuration
Code Block |
---|
+------------------------------------+-------------------------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------+ | name | value | descriptiontype | description | +------------------------------------+-------------------------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------+ | blessedaccess_subnetstoken_usecount | 10 y | number | ShouldAllow this wemany onlyaccess accepttokens datato frombe thestored blessedin subnetsthe listcookie. | | access_token_enable | | default_network_address | y | | bool | Should we enable |access Thetokens ipfor addressCSRF ormitigation. resolvable hostname used by external devices to talk to Open-AudIT. | | delete_noncurrentblessed_subnets_use | y | n | bool | Should we delete any attributes that are not present when we audit a device. only accept data from the blessed subnets list. | | discoverycollector_createcheck_alertsminutes | y 15 | Shouldnumber Open-AudIT| createThe andefault entrycheck ininterval the alert table if a change is detectedfor collectors. | | discovery_ip_exclude | | | database_show_row_limit | 1000 | number | The limit of rows to show, rather than download when exporting a database table. | | default_network_address | | text | The ip address or resolvable hostname used by external devices to talk to Open-AudIT. | | delete_noncurrent | n | bool | Should we delete any attributes that are not present when we audit a device. | | delete_noncurrent_netstat | y | bool | Should we store non-current netstat data and generate change logs. | | delete_noncurrent_variable | y | bool | Should we store non-current environment variable data and generate change logs. | | discovery_create_alerts | y | bool | Should Open-AudIT create an entry in the alert table if a change is detected. | | discovery_ip_exclude | | text | Populate this list with ip addresses to be excluded from discovery. IPs should be separated by a space. | | discovery_linux_script_directory | /tmp/ | text | The directory the script is copied into on the target device. | | discovery_linux_script_permissions | 700 | text | The permissions set on the audit_linux.sh script when it is copied to the target device. | | discovery_linux_use_sudo | y | bool | When running discovery commands on a Linux target, should we use sudo. | Populate this list with ip addresses to be excluded from discovery. IPs should be separated by a space. | | discovery_use_dns | y | | discovery_linux_script_directory | /tmp/ | bool | Should we use DNS |for Thelooking directoryup the script is copied into on the target device. hostname and domain. | | discovery_use_ipmi | | discovery_linux_script_permissions | 700 y | The permissions set| onbool the audit_linux.sh script| whenShould itwe isuse copiedipmitool tofor thediscovering targetmanagement device.ports if ipmitool is installed. | | discovery_nmap_osdisplay_version | n2.2.2 | text | The Whenversion shown discoveryon runsthe Nmap,web shouldpages. we use the -O flag to capture OS information (will slow down scan and requires SUID on the Nmap binary under Linux). | | discovery_use_dns | y | Should we use DNS for looking up the hostname and domain. | | download_reports | download | text | Tells Open-AudIT to advise the browser to download as a file or display the csv, xml, json reports. Valid values are download and display. | | discovery_use_ipmigraph_days | y30 | number | Should we use ipmitool for discovering management ports if ipmitool is installed. The number of days to report on for the Enterprise graphs. | | display_versiongui_trim_characters | 25 | 2.0.1 | number | TheWhen versionshowing showna ontable theof webinformation pages.in the web GUI, replace characters greater than this with "...". | | homepage | groups | | download_reportstext | Any links to the default page should be directed to this endpoint. | download | Tells Open-AudIT to advise the browser to download as a file or display the csv, xml, json reports. Valid values are download and display. | | graphinternal_daysversion | 20180620 | 30 | number | The internal numerical version. | The number of days to report on for the Enterprise graphs. | | homepagelog_level | 5 | groups | number | Any links to the default pageTells Open-AudIT which severity of event (at least) should be logged. directed to this endpoint. | | log_retain_level_0 | | internal_version 180 | 20170620 | number | Tells Open-AudIT how many days to keep logs with severity 0. | The internal numerical version. | | log_retain_level_1 | 180 | | logo | number | Tells Open-AudIT how many days to keep logs with severity 1. | logo-banner-oac-oae | The logo to be used in Open-AudIT. Should be a 475x60 .png. Name should not include the file extension. logo-banner-oac-oae is the default. | | log_level | | log_retain_level_2 | 5180 | number | Tells Open-AudIT whichhow severitymany ofdays eventto (atkeep least)logs shouldwith beseverity logged2. | | log_retain_level_03 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 03. | | log_retain_level_14 | 180 | number | Tells Open-AudIT how many days to keep logs with severity 1. 4. | | log_retain_level_25 | 18090 | number | Tells Open-AudIT how many days to keep logs with severity 2. severity 5. | | log_retain_level_36 | 18030 | number | Tells Open-AudIT how many days to keep logs with severity 36. | | log_retain_level_47 | 7 180 | number | Tells Open-AudIT how many days to keep logs with severity 47. | | logmaps_retainapi_level_5key | 90 | AIzaSyAhAUqssRASeC0Pfyx1TW1DXRmboG5bdG0 | text | The API key for Google Maps. | Tells Open-AudIT how many days to keep logs with severity 5. | | maps_url | | log_retain_level_6 | 30 | /omk/open-audit/map | text | The web server address of opMaps. | Tells Open-AudIT how many days to keep logs with severity 6. | | log_retain_level_7match_dbus | 7 | n | Tells Open-AudIT how many days to keep logs with| severitybool 7. | Should we match a device based on its dbus id. | | maps_api_key | | match_fqdn | AIzaSyAhAUqssRASeC0Pfyx1TW1DXRmboG5bdG0 | The API key for Google Maps. | y | bool | Should we match a device based on its fqdn. | | maps_url | /omk/open-audit/map | | match_hostname | The web server address of opMaps.| y | bool | Should we match a device based only on its hostname. | | match_dbus | n | match_hostname_dbus | y | Should we match a device based on its dbus id. | bool | Should we match a device based on its hostname and dbus id. | | match_fqdnhostname_serial | y | y | bool | Should we match a device based on its fqdn.hostname and serial. | | match_hostname_uuid | y | y | bool | Should we match a device based only on its hostname. and UUID. | | match_hostname_dbusip | y | n | Should we match a device based on its hostname and dbus id. | bool | Should we match a device based on its ip. | | match_hostname_serial | y | | match_mac | n | Should we match a device based on its hostname and serial. | bool | Should we match a device based on its mac address. | | match_hostname_uuid | y | | match_mac_vmware | n | Should we match a device based on its hostname and UUID. | bool | Should we match a device based mac address even if it's a known likely duplicate from VMware. | | match_ipserial | y | n | bool | Should we match a device based on its ip. serial number. | | match_macserial_type | y | n | bool | Should we match a device based on its serial macand addresstype. | | match_uuid | | match_mac_vmware | y | n | bool | Should we match a device based macon address even if it's a known likely duplicate from VMware.its UUID. | | match_serial | y | | modules | | Should we match a device based on its serial number. | text | The list of installed Opmantek modules. | | match_serial_type | y | | nmis | Should we match a device based on its serial and type. | n | bool | Enable import / export to NMIS functions. | | match_uuid | y | | nmis_url | Should we match a device based on its UUID. | | text | The web server address of NMIS. | | modules | | | oae_license | The list of installed Opmantek modules. | | text | License status of Open-AudIT Enterprise. | | nmis | n | | oae_product | EnableOpen-AudIT importCommunity / export to NMIS functions. | text | The name of the installed commercial application. | | nmis_url | | oae_prompt | | 2015-06-01 | date | The| webPrompt serverto addressactivate ofa NMIS.license for Open-AudIT Enterprise. | | oae_url | /omk/open-audit | | oae_license | text none | The web server address of Open-AudIT Enterprise. | License status of Open-AudIT Enterprise. | | output_escape_csv | y | | oae_product | bool | Escape CSV output so Excel will not attempt to run contents. | Open-AudIT Community | The name of the installed commercial application. | | page_size | 1000 | | oae_prompt | number | The default limit of rows to retrieve. | 2017-06-28 | Prompt to activate a license for Open-AudIT Enterprise. | | process_netstat_windows_dns | n | | oae_url | bool | Should we keep track of Windows netstat ports used by DNS above port 1000. | /omk/open-audit | The web server address of Open-AudIT Enterprise. | | rss_enable | y | bool | | page_refreshEnable the RSS feed. | 300 | Interval in seconds between auto-refreshing the page. Set to 0 to cancel auto-refresh. | | rss_url | | process_netstat_windows_dns | | https://community.opmantek.com/rss/OA.xml | text | The RSS feed URL. | Should we keep track of Windows netsta ports used by DNS above port 1000. | | rss_enableservers | y | text Enable the RSS| feed.The servers to report to when using Agent / Collector / Server. | | server_ip | | | rss_url | text | https://community.opmantek.com/rss/OA.xml | The locally RSSdetected feedIP URL.Addresses of this server. | | uuid | | | uuid | 980906d2-5994-11e7-a4a3-1c1b0d60813b | text | The unique identfier of this Open-AudIT server. | +------------------------------------+-------------------------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------+ |