Device allocation module

EventLog Analyzer and ADAudit Plus are two of the components of Log360 that predominantly works based on the number of devices they monitor. To avoid duplication of devices, Log360 device allocation module synchronize all the devices in the network between EventLog Analyzer with the ADAudit Plus and allows you to control the Windows devices added to them from a single console. You can enable auto allocation to avoid adding devices manually. You can check out the device allocation feature by following the steps below.

• Navigate to Admin → Administration → Device Allocation Management. You can view the existing devices here.
• To allocate devices to EventLog Analyzer and ADAudit Plus manually, click Allocate Devices.
• Select category from the drop down and select the devices from the Add Devices window and click Allocate.
• To enable Auto Allocation, click the slider.
• Click Auto Allocation Policy to view the device allocation by policy. You can customize the policy according to your requirements.
• In the Edit Policy window, you can select the Workgroup and the Domain from which the devices must be added.

What is device inheritance?

Device inheritance in the Log360 license model involves the sharing of licenses between ADAudit Plus and EventLog Analyzer when they are integrated with Log360.

In the standard Log360 licensing configuration, workstation devices are granted licenses for both EventLog Analyzer and ADAudit Plus. This means that devices listed in the ADAudit Plus workstation with a workstation icon are also licensed for EventLog Analyzer, but they will not appear with the A+ icon in the EventLog Analyzer device list.

Similarly, server devices will be licensed to ADAudit Plus and will be shared with EventLog Analyzer, i.e., in EventLog Analyzer, there will be an A+ icon next to each server devices which share the license of ADAudit Plus, while the same device will not have any icon in the ADAudit Plus devices list.

There are other cases, where the user might use a seperate EventLog Analyzer license or an ADAudit Plus license which has both servers and workstation instead of using bundled Log360 license. In this instance, the other component will share the license and display the A+ icon in EventLog Analyzer or the workstation icon in ADAudit Plus, depending on the nativity of the license.

How to delete the devices?

• If the device to be deleted is a server, go to ADAudit Plus → Configuration → Member Servers and delete the device. (Note: The same device will be automatically deleted in EventLog Analyzer as well.)
• If the device to be deleted is a workstation, go to EventLog Analyzer → Settings → Devices and delete the devices. (Note: The same device will be automatically deleted in ADAudit Plus as well.)
• In case the deletion fails with the error “Unable to delete inherited devices”, check the same device in the other component and delete it from there.

Troubleshooting

• Make sure the versions are up to date. It is recommended to have build numbers surpassing the current ones. The higher, the better.
• Log360 above 5267
• EventLog Analyzer above 12235
• ADAudit Plus above 7061
• If the error "Unable to delete inherited devices" appears in both components for a specific device, the synchronization might not have been successfully completed. To address this issue, troubleshooting is necessary.
• Go to Log360 → Admin - Administration → Integration Settings → EventLog Analyzer → Update Settings and wait for the synchronization to complete.
• After this, hit back. Select ADAudit Plus → Update Settings and wait for the synchronization to complete.
• Now check the above mentioned steps for deleting the devices again.
• If the device still could not be deleted, please use the below workaround as an immediate action and contact support if further assistance is required.
• Remove ADAudit Plus from Log360 Integration (DO NOT REMOVE EventLog Analyzer from Log360 Integration).
• After removing ADAudit plus, the inheritance will be reset in both EventLog Analyzer and ADAudit Plus. Now, the devices can be deleted manually on both EventLog Analyzer and ADAudit Plus.
• Now, reintegrate ADAudit Plus with Log360.