Skip to main content

Getting Started

After you install Enterprise Auditor, use the following workflow to quickly begin auditing the organization's IT infrastructure. See the Navigating the Console topic for additional information and data grid functionality.

Initial Configuration During First Launch​

The initial Enterprise Auditor Configuration Wizard walks you through configuring several key global settings:

  • Storage

    • Mandatory configuration during the first launch
    • Requires credential on the SQL® Server database which is used to create and modify the Enterprise Auditor database
    • Option to either create a new database or point to an existing database
    • If using Windows Authentication, the Schedule node must be configured also
    • See the Storage topic for additional information

  • Schedule

    • Only appears if the Storage Profile is configured to use Windows Authentication
    • If the Storage Profile is configured to use SQL Authentication, the setting is configured later
    • See the Schedule topic for additional information

  • Instant Job

    • Install the pre-configured solutions for which the organization is licensed
    • See the Instant Job Wizard topic for additional information

Global Settings Configured​

The global Settings affect how Enterprise Auditor runs jobs. You manage them through the Settings node at the top of the Navigation pane. The following global Settings require configuration from the start:

  • Connection – Configure the Default Connection Profile and additional Connection Profiles as needed for intended data collection
  • Schedule – Configure the Default Scheduled Service Account for scheduling Enterprise Auditor job execution, if not configured via the initial configuration wizard
  • Notification – Configure an SMTP server for Enterprise Auditor to use for sending email notifications

The other global Settings provide additional options for how Enterprise Auditor functions:

  • Access – Enable and configure Role Based Access for a least privileged application of Enterprise Auditor and report viewing or the enable the REST API

    note

    If you enable Role Based Access by accident, contact Netwrix Support for assistance disabling it.

  • Application – Configure additional settings not included in the other nodes

  • Exchange – Configure Microsoft® Exchange Server connections

warning

Don't configure data retention at the global level unless History supports all the solutions you plan to run.

  • History – Configure data retention and log retention settings
  • Host Discovery – Configure Host Discovery task settings
  • Host Inventory – Configure Host Inventory settings
  • Reporting – Configure reporting options, if necessary
  • Sensitive Data – Flag false positive within discovered potential sensitive data files
  • ServiceNow – Configure the ServiceNow Action Module authentication credentials
  • Storage – Configure additional SQL Server database Storage Profiles

See the Global Settings topic for additional information.

Discover Hosts for Enterprise Auditor​

Within the terminology of Enterprise Auditor, hosts are the machines that Enterprise Auditor targets during data collection. You can discover hosts or manually introduce them to Enterprise Auditor. Enterprise Auditor then inventories known hosts to populate dynamic host lists. You perform host discovery at the Host Discovery node. You manually introduce hosts at the Host Management node.

Host management consists of maintaining up-to-date host inventories and host lists that you can assign to job groups or jobs as targeted hosts. See the Host Management topic for additional information.

Enterprise Auditor Job Workflow​

After you configure the global Settings and introduce hosts to Enterprise Auditor, it's time to begin auditing. This requires an understanding of the relationship between solutions, job groups, jobs, queries, analysis, actions, and reports.

The Enterprise Auditor job is the fundamental unit. Jobs are responsible for all data collection queries, analysis tasks, notification tasks, action tasks, and report generation. When Jobs are designed to work together, they are housed within job groups to control the order of job execution. Solutions are pre-configured job groups that Netwrix designed to target specific types of environments and audit specific data sets, typically the most common types of information desired.

See the Jobs Tree topic for additional information.