Configure the audit collector service

By default, when you click Finish, the setup program opens the Collector Configuration Wizard. Alternatively, you can start the configuration wizard at any time by clicking Configure in the Collector Control Panel.

To configure the collector service:

  1. Type the port number to use, then click Next.

    The default port is 5063 for communication from agents to the collector. If you want to use a different port, the wizard checks whether the port is open in the Windows firewall.

    If you’re running another firewall product, open the port with the tools provided by that product. If there’s an upstream firewall—such as a dedicated firewall appliance—between the Collector and the computers to be audited, contact the appropriate personnel to open the port on that firewall.

  2. Select the installation of which this collector will be a part, then click Next.

    The configuration wizard verifies that the installation has an audit store that services the site that the collector is in and that the collector and its audit store database are compatible.

  3. Select whether you want to use Windows authentication or SQL Server authentication when the collector authenticates to the audit store database, then click Next.

    In most cases, you should choose Windows authentication to add the computer account to the audit store database as a trusted, incoming user.

    If Microsoft SQL server is in a different forest or in an untrusted forest, you should use SQL Server Management Studio to set up one or more SQL Server login accounts for the collector. After you create the SQL Server login account for the collector to use, you can select SQL Server authentication, then type the SQL Server login name and password in the wizard.

  4. Choose the maximum number of connections you want for the SQL Server Connection Pool, then click Next.

  5. Review your settings for the collector, then click Next.

  6. Click Finish to start the collector service and close the wizard.