Log File Collector Settings

The transportation settings are used to access the server where the log file containing the activity data resides.

Transport Type – depending on the transport type selected you will see the following:

local

If the log file containing the activity data is on the same server as IdentityIQ, no further connection-type information is required.

ftp

FTP User – a valid user name with authentication access to the FTP host.

FTP Password – the password associated with the FTP user.

FTP Host – the host where the log file resides.

scp

SCP User – a valid user name with authentication access to the SCP host.

SCP Password – the password associated with the SCP user.

SCP Host – the host where the log file resides.

SCP Private Key – the private key that is used to encrypt the collected data.

The log file settings are used to define the query used to collect the activity data on.

File Name

The name of the log file containing the activity data.

Lines to Skip

The number of lines to skip before starting the scan for activity information.

Filter Nulls

Skip lines that don't conform to the defined format.

Multi-lined Data

A single record in this file spans multiple rows.

Regular Expression

A regular expression groups that can be used to tokenize each record in the file.

The log field settings are used to create the log fields based on the column headings in the log file.

Name

The name of the log field to create based on a column name from the log file.

Trim Value

Remove white space around the column name before creating the log field.

Drop Nulls

If the column by this name is null, ignore this record. For example, if the user field is null, then the record cannot be correlated to a IdentityIQ identity and, therefore, cannot be used by IdentityIQ.