{"id":635,"date":"2009-07-03T16:38:17","date_gmt":"2009-07-03T06:38:17","guid":{"rendered":"http:\/\/nsrd.wordpress.com\/?p=635"},"modified":"2018-12-12T16:00:08","modified_gmt":"2018-12-12T06:00:08","slug":"are-you-monitoring-rap","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2009\/07\/03\/are-you-monitoring-rap\/","title":{"rendered":"Are you Monitoring RAP?"},"content":{"rendered":"<p>Introduced in NetWorker v7 was a feature called &#8220;Monitor RAP&#8221;. There&#8217;s two unfortunate aspects to this setting in the NetWorker server resource (&#8220;NSR&#8221;):<\/p>\n<ul>\n<li>It is not enabled by default;<\/li>\n<li>The setting name obfuscates the purpose of the setting for most users.<\/li>\n<\/ul>\n<p>Personally, I would have preferred when this option was made available that it was called &#8220;Audit Changes&#8221;, and that it was enabled by default.<\/p>\n<p>In the NetWorker management console, with diagnostic mode enabled, this option is available in the first tab of the NetWorker server properties:<\/p>\n<figure id=\"attachment_637\" aria-describedby=\"caption-attachment-637\" style=\"width: 500px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-637\" title=\"Monitor RAP setting\" src=\"http:\/\/nsrd.files.wordpress.com\/2009\/06\/monitor-rap.png\" alt=\"Monitor RAP setting\" width=\"500\" height=\"387\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2009\/06\/monitor-rap.png 810w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2009\/06\/monitor-rap-300x232.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2009\/06\/monitor-rap-386x300.png 386w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><figcaption id=\"caption-attachment-637\" class=\"wp-caption-text\">Monitor RAP setting<\/figcaption><\/figure>\n<p>With this setting enabled, NetWorker maintains a new log, <em>rap.log<\/em>, within the logs directory. This tracks changes that are made to the NetWorker configuration, as they are made.<\/p>\n<p>Here&#8217;s an example:<\/p>\n<pre>06\/30\/2009 06:49:19 PM MONITOR_RAP: preston@archon CHANGED 'NSR group'\nresource, Staging Development:\n autostart: Enabled;\n autostart: Disabled;<\/pre>\n<p>This tells us that at 18:49:19 on 30 June 2009, user &#8216;preston&#8217; on host &#8216;archon&#8217; changed the group &#8216;Staging Development&#8217;, changing &#8216;autostart&#8217; from &#8216;Enabled&#8217; to &#8216;Disabled&#8217;.<\/p>\n<p>This means that from the NetWorker level*, you can easily keep track of <em>who<\/em> does <em>what<\/em> to the NetWorker configuration. Interestingly, you can also use this information to also track <em>self-changes<\/em> to the system \u2013 i.e., where NetWorker updates its own configuration. As an example, if you use a license manager, then whenever NetWorker updates\/checks its licenses against the license server, you&#8217;ll get entries in the logs such as:<\/p>\n<pre>06\/30\/2009 05:10:00 PM MONITOR_RAP: root@nox CHANGED 'NSR license' resource,\nAutochanger Module, 40 slots\/40:\n checksum: \n\"'j&amp;P_-QFc]]D~GIQ\\_[q-jMFx;ajW%U~\\1^UvCm`dJEwg\/\nT#XGMpaVYet\\l]M\\w\\{QQ\\\\\nWuR]\"Ax*@^XX'[ZAG388M)I6fvztWrC9q\"G3PeML!wl\n{P6L0]JU9a9[{WYZ\";\n checksum: \n\"Z$EP_Jts]gYNZV_ATn]AZSxcTorL#f2(\"8\/PTcIYec}K+}\ne_GGsJ$6IC)QLTz\\_aS?[|lc^\\Z\nrN9}A~L@}?b^Vlud-e:SD+Js&lt;U]T!eXR\"y\/,bQHO\n0_CShOlw?U1h\\g?\";<\/pre>\n<p>Using the <em>Monitor RAP<\/em> setting allows you to easily monitor changes to the NetWorker configuration, and I believe that every NetWorker site should <em>always<\/em> have this setting enabled.<\/p>\n<p>&#8212;<br \/>\n* Auditing is also available within NMC. For maximum auditing, I always recommend that both options be used.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduced in NetWorker v7 was a feature called &#8220;Monitor RAP&#8221;. There&#8217;s two unfortunate aspects to this setting in the NetWorker&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[16,21],"tags":[125,597,1254],"class_list":["post-635","post","type-post","status-publish","format-standard","hentry","category-networker","category-security","tag-audit","tag-monitor-rap","tag-security"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-af","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=635"}],"version-history":[{"count":1,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/635\/revisions"}],"predecessor-version":[{"id":7640,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/635\/revisions\/7640"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}