BMC Defender Server fast start
The remainder of this section discusses the BMC Defender Server in detail. For those users wanting a quick start, the following information gets BMC Defender Server up and running as quickly as possible, permitting you to begin using the program immediately.
- Web browser access—After installing BMC Defender Server, you can access it by using a web browser at port 80 or port 88, or port 888 or port 8888. The particular port number is displayed and configured in the installation dialog and is by default port 80, but might also default to one of the other port numbers if some other program is already using port 80. You can typically access BMC Defender Server by using a desktop shortcut on the machine where BMC Defender Server is installed.
- System logon—The default login to BMC Defender Server is username admin, password admin. After logging into the system, you can click the tabs, at the top of the browser display, selecting first System and then Logins. This enables you to view and modify the login username or password or add other user logins.
- Reception of messages—To receive messages, you must redirect the syslog servers of your UNIX boxes, your Cisco routers, and install the Windows Syslog Utilities, found in the system directory of your installation. In particular, you should install the CO-sysmsg.exe service on each Windows box you plan to manage, as discussed in Installing-BMC-Defender-Server. This allows BMC Defender Server to manage your Windows event logs.
- Reviewing received messages—To view the message information, click the Messages tab at the top of the display. From that location, you can search for messages, view the catalog information, filter and override messages, or set parameters governing message collection.
- Searching for messages—To search for messages, use the Messages > Search tab for quick searches by keyword. For advanced searches, use the Reports > Query tab that permits searching by complex match pattern. (Links to these two tabs are provided at the top right of the web display.)
- Correlation—To correlate messages, click the Correlation tab at the top of the display. The first tab, Threads, forms the basis of most correlation functions and allows you to inspect and create classes of messages.
- Detailed analysis—You can click down into any catalog, thread, or view all messages and click the Analyze option to view the devices, users, facilities, and severities associated with each message class. The Analyze link (a magnifying glass image) appears on all screens where raw messages are displayed and greatly assists with organizing and analyzing messages based upon devices, users, facilities, severities, frequencies, or arbitrary common fields and parse specifications.
Future sections describe the various other features, adaptations, customizations, and applications associated with the BMC Defender Server, in detail. The reader is encouraged to experiment with the system.
In particular, almost all of the information required to understand the essentials of the BMC Defender Server has now been explained, you can begin exploring your enterprise message information.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*