BeyondInsight Event and I/O Logging Common Settings

The settings in this section must be set, in addition to the settings described in BeyondInsight Event Logging and BeyondInsight I/O Log Indexing and Searching.

pbadminpath

  • Version 7.1 and earlier: pbadminpath setting not available.
  • Version 7.5 and later: pbadminpath setting available.

The path where admin binaries reside. This is used by pbmasterd and pblogd to forward events and iologs via pbreplay.

pbadminpath /usr/sbin/

Default

No default value

Used On

  • Policy server hosts
  • Log hosts
  • GUI hosts

guiport

  • Version 7.1 and earlier: guiport setting not available.
  • Version 7.5 and later: guiport setting available.

Defines the TCP port number that is used for PBGUID. The port numbers for Endpoint Privilege Management daemons must use the non-reserved system ports. The allowed port numbers are 1024 to 65535 (inclusive).

In a BeyondInsight integrated environment, this port number is used by the BeyondInsight Console to replay I/O logs.

guiport 24348

Default

guiport 24348

Used On

  • Policy server hosts
  • Log hosts
  • GUI hosts

sguiport

  • Version 7.1 and earlier: sguiport setting not available.
  • Version 7.5 and later: sguiport setting available.

Defines the TCP port number that is used for the secure PBSGUID. The port numbers for Endpoint Privilege Management daemons must use the non-reserved system ports. The allowed port numbers are 1024 to 65535 (inclusive).

In a BeyondInsight integrated and SSL-enabled environment, this secure port number is used by the BeyondInsight Console to replay I/O logs.

sguiport 24349

Default

sguiport 24349

Used On

  • Policy server hosts
  • Log hosts
  • GUI hosts

sharedlibcurldependencies

  • Version 7.1 and earlier: sharedlibcurldependencies setting not available.
  • Version 7.5 and later: sharedlibcurldependencies setting available.

Defines the path and file name for libcurl used by the binaries to communicate with Solr server and/or BeyondInsight server. Setting sharedlibcurldependencies requires sharedlibkrb5dependencies and sharedlibssldependencies to be set.

The certificates used for BeyondInsight by EPM-UL need support for SHA-256 algorithm which was introduced in SSL v0.9.8. Therefore starting with v7.5, the SSL libraries shipped with EPM-UL Shared Libraries are SSL libraries v0.9.8. When installing or upgrading, sharedlibssldependencies need to be set to:
/usr/lib/beyondtrust/pb/libcrypto.so.1.1 /usr/lib/beyondtrust/pb/libssl.so.1.1
sharedlibcurldependencies /usr/lib/beyondtrust/pb/libcurl.so.4.7.0"

Default

  • AIX: /usr/lib/symark/pb/libcurl.a(libcurl.so.4)
  • HPUX Itanium: /usr/lib/symark/pb/libcurl.so.7.0
  • Linux, Solaris: /usr/lib/symark/pb/libcurl.so.4.3.0

Used On

  • Policy server hosts
  • Log hosts

loadcurllibs

  • Version 7.5 and earlier: loadcurllibs setting not available.
  • Version 7.5 and later: loadcurllibs setting available.

Forces the loading of libcurl libraries defined in sharelibcurldependencies.

loadcurllibs yes

Default

loadcurllibs no

Used On

  • Policy server hosts
  • Log hosts