I would like to ask if there is a way to know who is the last user changed the probe settings in IM.
For example, the threshold for drive C: is 10% and someone changed it to 11%, how can I know the user who change it to 11%? Is there any logs? or path. Thanks in advance.
If you have the audit probe installed you can see this in audit probe gui
audit - CA Unified Infrastructure Management Probes - CA Technologies Documentation
Thank you, but do I need to install audit probe in all servers? Or in primary hub only?
You just need to run one instance of audit probe in your UIM infrastructure.
I think primary hub robot is the best choice for audit probe to run.
After that, you can enable auditing mode on robots where you would like to audit. See this.
In addtion you will need to add the "audit" subject in queues connecting upstream from Remote hubs to send it to audit probe running on Primary hub from remote hubs/robots
Thank you sir YU! It works!
Thanks Sir Franklin for your help, one more thing, if I enable all the audit in all our server, is there any impact? like high utilization or it will consume more disk space, what is the possible issue if we enable all the audit in all our servers. Please advise.
You can follow the below KB to reduce retention days in AUDIT_EVENT table from default
audit probe application error - CA Knowledge
What is the best retention days to set to prevent slowness?