Yes!!
We first recommend creating two domain accounts "eventsentry_svc" and "eventsentry_web" and then on the machine with EventSentry, give these accounts "Local Administrator" rights. These are the accounts that your EventSentry related services will be running as (Agent, Heartbeat, Collector, etc.) which typically run as the "Local System" account.
In SQL Management Studio, then you can run the following query to create your database:
1 2 3 4 5 6 7 |
CREATE DATABASE "EventSentry" Create login "domain_name\eventsentry_svc" FROM WINDOWS with default_database = "EventSentry" CREATE USER "domain_name\eventsentry_svc" FOR LOGIN "domain_name\eventsentry_svc" Create login "domain_name\eventsentry_web" FROM WINDOWS with default_database = "EventSentry" CREATE USER "domain_name\eventsentry_web" FOR LOGIN "domain_name\eventsentry_web" Create login "domain_name\eventsentryadmonitor" FROM WINDOWS with default_database = "EventSentry" CREATE USER "domain_name\eventsentryadmonitor" FOR LOGIN "domain_name\eventsentryadmonitor" |
Please note, you should change domain_name with the name of your domain in the above query.
Then, download the following files:
Agent/Web grant statements
ADMonitor grant statements
both .SQL files will need to be edited to replace domain_name with your environments domain name.
After the files have been downloaded and edited, run them in SQL management studio and this will create all the tables, columns and permissions for the appropriate users.
Once the database has been created and both grant statements have been run, you can right-click on the database in SQL management studio and select "Properties" > "Permissions" and then click "Search" by Users or roles: and the click "Browse" and select the following users:
domain_name\eventsentry_svc
domain_name\eventsentry_web
domain_name\eventsentryadmonitor
then click "OK". Then highlight each user and find "CONNECT" and check the first box in the "Grant" column allowing these users to connect to the EventSentry database.
In the EventSentry management console, under "Actions," you should find a "Primary Database" action and you can edit the connection string by removing the userid/pwd and adding:
trusted_connection=yes
it will look like this:
driver={SQL Server};server=server,1433;Network=DBMSSOCN;database=EventSentry;trusted_connection=yes
In the EventSentry Web Reports, if you click on "Settings > Profiles," you can check "Trusted Connection".
In "Services.msc," set the following services to services to run as the domain_name\eventsentry_svc account:
EventSentry
EventSentry Collector
EventSentry Heartbeat Monitor
EventSentry Network Services
The EventSentry Web Reports should run as the domain_name\eventsentry_web account.