This chapter provides a detailed description of the Guardian User Interface components and features, and a detailed reference guide to the Guardian Command Line Interface. Topics include the following:
The Main Menu Bar is at the top of the Oracle Guardian main window just below the Oracle Guardian titlebar. The Menu Bar contains the following menus:
The Menu Bar menus in turn contain a series of options and submenus, some of which also lead to additional menus, dialog boxes, or wizards. The following sections provide a description of each of these menus, and instructions for invoking them.
You can invoke many menus, submenus, and menu options by using a keyboard shortcut. To display Menu Bar menus, press the Alt key and type the menu selection key for the menu you want to display. The menu selection key is the letter underlined in the menu name in the Menu Bar when you press the Alt key.
Some menu options also have keyboard shortcuts, which consist of a specific sequence of characters pressed simultaneously. If a menu item has a keyboard shortcut, the key sequence is listed next to the item in the menu. To see the complete list of keyboard shortcuts, press Ctrl+Shift+L.
Table 3-1 describes the File menu options and submenus.
Table 3-2 describes the Edit menu options.
Table 3-3 describes the Tools menu options and submenus.
Table 3-4 describes the Window menu options and submenus.
Table 3-5 describes the Help menu options and submenus.
The Main Toolbar is located below the Main Menu Bar, and contains action buttons for the most common Guardian tasks. You can roll your mouse pointer over a button to display the tool tip text for that button.
Table 3-6 describes the Main Toolbar buttons.
Many views and displays contain context menus. Right-click on an item or anywhere in a display to open the associated context menu.
The Navigation Pane resides in the left side of the Oracle Guardian main window. The Navigation Pane contains several tabs leading to Explorer Views. You can have multiple Views open at once, but only one can be displayed at a time. Click on a tab to display that Explorer View.
The following section provides an overview of Navigation Pane elements.
Navigation Pane elements include the following:
The following sections describe each of these elements.
At the top of the Navigation Pane are the Explorer View tabs. Select a tab to display that View. Table 3-7 provides an overview of the Navigation Pane Explorer Views.
Open the Domain Explorer. This View enables you to browse, manage, and monitor the domains you have defined in Guardian. Right-click in the Domain Explorer to open a context menu of domain operations. For a complete description, see
Domain Explorer. For instructions on Domain Explorer tasks, see
Domains in
Tasks.
|
|
Open the Signature Explorer. This View enables you to browse the available signatures and view the contents of a selected signature. For a complete description, see
Signature Explorer. For instructions on Signature Explorer tasks, see
Signatures in
Tasks.
|
|
Open the Bundle Explorer. This View enables you to browse the available Signature Bundles and their contents. For a complete description, see
Bundle Explorer. For instructions on Bundle Explorer tasks, see
Bundles in
Tasks.
|
|
Open the Shortcut Explorer. This View enables you to view and manage your Evaluation Shortcuts. For a complete description, see
Shortcut Explorer. For instructions on Shortcut Explorer tasks, see
Shortcuts in
Tasks.
|
Below each Explorer tab titlebar is the Explorer toolbar. An Explorer toolbar may contain all or some of the following active icons:
The Domain Explorer, Signature Explorer, and Bundle Explorer each contain a menu icon in the right corner of the toolbar. Click the menu icon to open a menu of display options for that Explorer.
Table 3-9 describes the Explorer menus.
|
|
|
|
|
Right-click in an Explorer View to display the context menu of tasks and operations you can perform from that View. You can also right-click on a specific item to select it and open the context menu for that item. Menu options that do not apply to your selection are deactivated.
For a detailed description of a specific context menu, see the appropriate section listed below:
The Domain Explorer is a Navigator View that enables you to browse, manage, and monitor the domains you have activated in Guardian. In the Navigation Pane, select the Domain Explorer tab to display the explorer.
The following table provides an overview of Domain Explorer elements:
This is the top-level folder in the Domain Explorer Target Domains tree. This folder contains a unique Domain Node for each domain activated in Guardian. Open the folder to see the available nodes. Double-click on the Target Domains folder to display the Active Domains Table in the Document Pane.
See also Active Domains Table.
|
|
These represent domains you have activated in Guardian. Open the Target Domains folder to see the available nodes.
For more information, see
Domain Nodes.
|
|
These contain the Domain Inventories and Evaluation Summaries for a domain. Each Domain Node contains the following two History folders:
For more information, see Domain History Folders.
|
|
For more information, see Domain Explorer Toolbar Menu.
|
|
Right-click on an item in the Domain Explorer to display a context menu of domain and Domain Group operations.
For more information, see Domain Explorer Context Menu.
|
A domain node represents a domain that has been activated (defined and enabled for evaluation) in Guardian. When you activate a domain for the first time in Guardian, a node for the new domain is added to the Target Domains folder in the Domain Explorer tree. A unique name is automatically generated for the new domain, based upon your entries in the Domain Activation Wizard.
The generated name has the following syntax:
<
domain_name
>_<
hostname
>_<
listen-port
>
<
domain_name
>
is the name for this domain.<
hostname
>
is the listen address (hostname) for the WebLogic Administration Server for this domain. This is the hostname you entered in the Hostname field of the Domain Activation Wizard (for example, localhost).<
listen-port
>
is the listen port for the WebLogic Administration Server for this domain.Note: | In the Command Line Interface, the domain node name is referred to as the domainId for the domain. |
The Domain Explorer tree displays only the active Domain Nodes. “Active” does not refer to the state of the domain servers themselves, but rather to whether you have enabled that domain for evaluation. If you deactivate a domain in Guardian, that domain is removed from the Domain Explorer tree. However, if you reactivate the domain, the node for that domain is again displayed, and the original contents of the History folders are also again available. Deactivating a domain does not remove the Workspace data for that domain.
The Domain Explorer displays only the active Domain Nodes. In the Domain Explorer tree, active domains have a blue node icon to the left of the domain name. Icon decorations indicate whether the username and password have been persisted, and whether the domain requires SSL encryption for all communication.
Note: | Oracle recommends using SSL encryption for communication between the client and the Guardian Agent. Guardian uses 128 bit open source encryption for SSL. However, the configuration on the server for the domain determines whether or not Guardian will use 128 bit SSL encryption when activating that domain. |
The following table describes the Domain Node icon and icon decorations.
Domain Inventories and Evaluation Summaries for a domain are accumulated in History folders, which persist on disk in your Guardian Workspace. These are represented as folder icons below each Domain Node in the Domain Explorer Target Domains tree. Each Domain Node contains the following two History folders:
The following sections describe each of these folders.
The Inventory History folder contains the Domain Inventories that have been generated for that domain. Double-click on a Domain Inventory name to display the inventory details in the Document Pane.
Each time you activate, evaluate, or inventory a domain, a new Domain Inventory is created and added to the Inventory History folder for that domain. A unique name is generated for each new Inventory, using this format:
<
domain_name>_<
hostname>_<
listen_port>_<
date> <
time>.
See also Domain Inventory in “About Oracle Guardian,” and Domain Inventory View in “Reference.”
The Evaluation History folder contains the Evaluation Summaries that have been generated for that domain. Double-click on an Evaluation Summary name to display the evaluation details in the Document Pane.
Each time you evaluate a domain, a new Evaluation Summary is created and added to the Evaluation History folder for that domain. A unique name is generated for each new Inventory, using this format:
Each Evaluation Summary listed in the Evaluation History folder has an icon indicating whether any signatures were detected. If any signatures were detected, the icon is decorated with a severity indicator. The detected signature with the highest severity determines the severity of the Evaluation Summary.
The following table describes the Evaluation Summary icons.
Click the Domain Explorer toolbar menu icon to display a menu containing the following options:
You can use either of the following methods to open the Domain Explorer context menu:
The following table describes the Domain Explorer context menu options.
This opens the Domain Activation Wizard. If the domain is already activated, this option is disabled. For details, see
Domain Activation Wizard.
|
|
This opens the Domain Deactivation Wizard. If the domain is already deactivated, this option is disabled. For details, see
Domain Deactivation Wizard.
|
|
This opens the Domain Properties dialog box for the selected domain. You can then modify the property settings for that domain. For details, see
Domain Properties Dialog Box.
|
|
This opens the Inventory Wizard for the selected domain. If no domain is selected, you can select one from the domain list in the wizard. For details, see
Inventory Wizard.
|
|
This opens the Shortcut Wizard for this domain. For details, see
Shortcut Wizard.
|
|
This opens the Evaluation Wizard for the selected domain. If no domain is selected, you can select one from the domain list in the wizard. For details, see
Evaluation Wizard.
|
|
This opens the Evaluate a Domain dialog box for the selected domain. Use this to select a domain, Signature Bundle, and Data File to use for the Evaluation. For details, see
Evaluate from File Dialog Box.
|
|
Create a new Domain Group. Right-click on Target Domains and select Add Domain Group from the context menu to display the Add Domain Group dialog box. For details, see
Add Domain Group Dialog Box.
|
|
Remove the selected Domain Group. Right-click on a Domain Group and select Delete Domain Group from the context menu. A confirmation dialog box prompts you to confirm or cancel the operation. Click Yes to delete the selected group. You cannot delete a domain group that is not empty. To depopulate a group, drag and drop the Domain Nodes from that group into the Target Domains folder or anther Domain Group. See also
Delete Domain Group in Tasks.
|
|
This opens the Rename Domain Group dialog box for the selected domain. Enter the new name and click OK. See also,
Rename Domain Group Dialog Box.
|
|
This opens a submenu listing the Bundles available for evaluation. Select a Bundle to open the Bundle Evaluation Wizard for that Bundle. For details, see
Bundle Evaluation Wizard
|
Domain Properties govern how Guardian accesses a target domain. The Domain Properties dialog box enables you to view and modify the Domain Properties for a specific domain.
To open the Domain Properties dialog box for a domain, right-click on the domain name in the Domain Explorer tree, and then select Modify Domain from the context menu.
The Domain Properties dialog box contains the following elements:
Select this if a proxy server is to be used to access the target domain. Then, select a proxy server from the drop-down list. If there are no proxy servers in the drop down list, this checkbox is disabled. See
Proxy Servers of Tasks, for complete instructions on enabling and adding proxies.
|
|
To capture target domain data to a file for later evaluation, you can set the following flag in your guardian.ini
file:
-Dguardian.dump.collection.data
When this flag is set, each time a domain is evaluated, the data is captured and written to two files in the data
subdirectory of your Guardian Workspace. The files are named as follows:
collectedData_<
nnnnnnnnnnnnn>.xml
Where <
nnnnnnnnnnnnn>
is a timestamp for the creation of the file.
collectedData_1218570631376.xml
These two files are differentiated by their respective timestamps, and their size. The earlier, smaller file contains the data collected from the domain as restricted by the selected Signature Bundle. The second and much larger file contains a collection of all available data from the domain.
The captured data can then be evaluated, as explained below. The evaluation proceeds the same as with a “live” evaluation, except that the data in the capture file is evaluated, rather than evaluating the realtime data from a live server.
Note: | In most cases, you can use the smaller of the two files for the evaluation. However, using the larger data file reveals more Detected Signatures, since there is no Bundle restriction. |
You can use the Evaluate from File dialog box to specify a domain, Signature Bundle, and data file to use for a data file evaluation.
You can use either of the following methods to open the Evaluate from File dialog box:
The Evaluate from File dialog box contains the following elements:
Use the Add Domain Group dialog box to create a new Domain Group. To open, right-click on Target Domains in the Domain Explorer tree and select Add Domain Group from the context menu. Enter a name for the domain and click OK to add the new group to the Target Domains folder.
For instructions on populating and using Domain Groups, see Domain Groups in Tasks.
Use the Rename Domain Group dialog box to change the name for a Domain Group. To open, right-click on Target Domains in the Domain Explorer tree and select Rename Domain Group from the context menu. Enter the new name and click OK.
See also, Rename Domain Group in Tasks.
The Signature Explorer is a Navigator View that enables you to browse the available signatures and view the contents of a selected signature. In the Navigation Pane, select the Signature Explorer tab to display the explorer.
The Signature Explorer contains a list of all existing signatures currently installed in Guardian. Double-click on a signature title to display the contents of that signature in the Document Pane.
To the left of each signature title in the Signature Explorer signature list is a Signature Severity icon. The icon indicates the severity level for that signature.
The following table describes the Signature Severity icons:
Click the Signature Explorer toolbar menu icon to open a menu of options for sorting and filtering the signature list.
The Signature Explorer toolbar menu contains the following options:
This opens the Filters Wizard, for specifying which signatures to include in signature displays. For details, see
Filters Wizard. For instructions on using the wizard, see
Filter Signatures in Tasks.
|
|
Right-click on a signature name in the Signature Explorer to display the Signature Explorer context menu. This menu has only one option:
|
The Bundle Explorer is a Navigator view for browsing the available Signature Bundles and their contents. In the Navigation Pane, select the Bundle Explorer tab to display the explorer.
The Bundle Explorer contains the following elements:
For more information, see
Bundle Explorer Toolbar Menu.
|
|
Right-click on a signature title in the Bundle Explorer to display a context menu with the following option:
For more information, see
Bundle Explorer Context Menu.
|
Each Bundle Node has an icon indicating the severity level for that Bundle. The security level for the Bundle is determined by the highest security level occurring for any signature in that Bundle. For example, if only one signature in the Bundle has a severity level of Critical, then the entire Bundle will have a severity level of Critical.
The Bundle and Signature Severity icons are as follows:
Click the Bundle Explorer menu icon to open a menu with the following options:
This opens the Filters Wizard, for specifying which signatures to include in signature displays. For details, see
Filters Wizard. For instructions on using the wizard, see
Filter Signatures in Tasks.
|
|
This displays a submenu with the following options for sorting the signatures displayed in the Bundle Explorer:
|
|
In the Bundle Explorer, right-click on a signature title to display the Bundle Explorer context menu. This menu has only one option:
|
The Shortcut Explorer is a Navigation Pane View for viewing and managing your Evaluation Shortcuts. In the Navigation Pane, select the Shortcut Explorer tab to display the explorer.
The Shortcut Explorer displays a list of all of the Evaluation Shortcuts you have created. Double-click on a Shortcut to open the Shortcut Evaluation Wizard with the Shortcut target domain and Signature Bundle preselected.
For a description of Shortcuts, see Shortcut in About Oracle Guardian. For instructions on creating and using Shortcuts, see Shortcuts in Tasks.
You can use either of the following methods to open the Shortcut Explorer context menu:
The Shortcut Explorer context menu contains the following options:
This opens the Shortcut Wizard for creating a new Evaluation Shortcut. For instructions, see
Shortcut Wizard.
|
|
This opens the Shortcut Evaluation Wizard for conducting an evaluation as defined in the selected Shortcut. For instructions, see
Shortcut Evaluation Wizard.
|
The Document Pane is located in the central portion of the Oracle Guardian main window. The Document Pane displays the Document Views.
The Document Pane contains the following elements:
The Document Views display the details document(s) for the object selected in the Navigation Pane. Some Views also have editing features for cutting, copying, and pasting text selections into an external editor. If edit options are available for a View, you can right-click in that View to open an Edit menu of those options.
You can have multiple Views open in the Document Pane, but only one can be active at a time. Each opened View has a tab, located at the top of the Document Pane. Click on a View tab to activate and display that View. Some Views have additional tabs, located at the bottom of the View display. These display additional pages for that View, such as the Overview, Source, and Report pages.
Table 3-25 provides an overview of the Document Views.
Open the Domain Explorer > Inventory History folder and then double-click on a Domain Inventory title to display that inventory in the Document Pane. The inventory includes descriptions of your servers, Java Virtual Machines, operating systems, databases, product versions, and certain configuration settings. The Domain Inventory View contains the following tabs:
For details, see
Domain Inventory View.
|
|
Open the Domain Explorer > Evaluation History folder, and then double-click on an Evaluation Summary title to display that Evaluation Summary in the Document Pane. This contains a table of all detected signatures for the evaluated domain. Select a signature in the list to display the signature Description and Remedy details for that signature. For details, see
Evaluation Summary View.
|
|
Double-click on a signature entry in the Signature Explorer or Bundle Explorer to display this View. This View contains the following tabs:
For details, see
Signature View.
|
|
Double-click on a Bundle Node in the Bundle Explorer to display this View. This View provides a description and some additional details about the selected Bundle. Also included is the Signature Definition for the Bundle. For details, see
Signature Bundle View.
|
|
Select Window > Show View > Active Domains Table to display this View. This contains a table of all of the domains currently activated in Guardian, and action buttons for the following tasks:
For details, see
Active Domains Table.
|
|
Select Window > Show View > Shortcuts Table to display this View. This contains a table of all of your Shortcuts, and action buttons for the following tasks:
For details, see
Shortcuts Table.
|
When a Document View is open, you can select Window > Show View > Outline View to display the Outline View for the current Document View. You can use the Outline View as a navigator for the current Document View. You can click the Overview, Source, or Report nodes in the Outline View to bring the corresponding tab of the Document View to the forefront. You can open the Outline View Source node to select specific XML tag names, to jump to those tags in the Source page and highlight them.
Each Document View has a titlebar that contains the name of the View, an identity icon (for example, a Domain or Signature icon), and buttons to close, minimize, maximize, and restore the display.
The View titlebars also have the following additional features:
Roll your cursor over titlebar text for a bubble help description of that text or page. For example, for a Domain Inventory View, this displays the full Guardian Workspace path and inventory file name for that Domain Inventory.
Double-click the titlebar to maximize a View. Double-click it again to restore it to its original size.
Right-click on a titlebar to open the System Menu for that View. This contains options for restoring, sizing, minimizing/maximizing, and closing View(s). This menu also enables you to open a new (unedited) copy of the View, or to move a tab or tab group.
You can group multiple Views together on a titlebar as a tab group. Tab groups can be moved together as a unit, using either the System Menu > Move menu option or drop cursors. Only the titlebar of the currently active View is visible in a tab group.
If you have more Views open than can fit on a titlebar, a Show List icon appears to the right of the titlebar tabs. The icon includes a number that indicates how many more open Views can fit on the titlebar. Click the icon to display a list of all the titlebar View. Select an item from the list to make it active and bring it to the forefront of the Navigation Pane or Document Pane display. The items listed in bold font are those that cannot fit on the titlebar. The items not listed in bold are those that are already shown on the titlebar.
You can move Views by dragging their titlebars to different locations, as follows:
The following Document Views have context menus:
The Active Domains Table and Shortcuts Table Views do not have context menus.
Each tab page for a View has a context menu specific to the tab contents. Some context menus—for example, Edit menus—may be available only for certain items within that View.
To open a context menu, right-click on an item in that View.
Edit menus are available in some View pages for text items that can be copied and pasted to an external editor. If an item cannot be edited (copied), the Edit menu will not be available. Right-click on an item to display a menu of standard edit options for that item.
The Edit context menu contains the following standard options:
The Domain Inventory Document View displays the contents of a Domain Inventory. The Domain Inventory is an XML document that describes the products in your domain, and is persisted in your Guardian Workspace. The inventory includes descriptions of your servers, Java Virtual Machines, operating systems, databases, product versions, and certain configuration settings. For details, see Domain Inventory in the section “About Oracle Guardian.”
You can use either of the following methods to open a Domain Inventory View:
The Domain Inventory View contains the following tabs:
The contents of each of these tab pages are described in the following sections.
The Domain Inventory Overview page displays a summary of the selected Domain Inventory. The Overview page contains the following sections:
These are described in the following sections.
The Domain Inventory Servers section contains the following information:
The Domain Inventory JDBC section contains the following information:
The Domain Inventory Source page displays the XML source for the selected Domain Inventory. This page also has a context menu of options for saving, copying, and printing the inventory XML source.
Right-click in the Source page to display a context menu with the following options:
The Domain Inventory Report page displays all of the information contained in the Domain Inventory Overview page, in a printer friendly format. This page also has a system menu of options for exporting, printing, creating a desktop shortcut for the page, adding the inventory to your favorites list, and other file operations. Right-click anywhere in the Report page to display this menu. Some options may not be applicable in this context.
The Evaluation Summary View displays the contents of a selected Evaluation Summary document. An Evaluation Summary is created each time you evaluate a domain, and is persisted in the Guardian Workspace. For more information, see Evaluation Summary in the section “About Oracle Guardian.” For instructions on conducting evaluations, see Inventories and Evaluations in Tasks.
You can use either of the following methods to display an Evaluation Summary:
The Evaluation Summary View contains the following tabs:
The following sections describe the contents of each of these tab pages.
The Overview page displays the results data for the selected Evaluation Summary, which includes a table of all signatures detected in the Evaluation. You can click on a signature entry in the table to view the Description and Remedy information for that signature. The Description and Remedy information is displayed in the lower half of the Overview page, just below the Detected Signatures table. You can expand or collapse a View section by clicking the triangle icon in the heading.
The Evaluation Summary Overview page contains the following sections:
These are described in the following sections.
The General Information section of the Evaluation Summary View contains the following information:
The Detected Signatures Table contains the list of signatures detected for this domain for this evaluation, and some additional information about each detected signature.
Select a signature entry in the table to display the details for that signature in the Description and Remedy sections of the View. Details for the first entry are displayed by default.
Click on a table column heading to sort the table contents according to that column order. The default sort order is by Severity and then Name.
The Detected Signatures Table contains the following information for each detected signature:
To the left of each signature title in the Severity column of the table is a Signature Severity icon. The icon indicates the severity level for that signature.
The following table describes the Signature Severity icons:
Right-click on a signature title in the Detected Signatures table to open a context menu with the following options:
This opens the Filters Wizard, for specifying which signatures to include in signature displays. For details, see
Filters Wizard. For instructions, see Filter Signatures in
Tasks.
|
|
Manage Annotations: Select this to open the Annotations Wizard. For details, see
Annotations Wizard. For instructions on using this wizard, see
Signature Annotations of Tasks.
|
The Description section of the Evaluation Summary View is the left panel below the Detected Signatures table. Select a signature entry in the Detected Signatures table to display the Description details for that signature. This section contains the following information:
The Remedy section of the Evaluation Summary View is located below the Detected Signatures table, on the right side. Select a signature entry in the Detected Signatures table to display the Remedy details for that signature.
The Remedy section contains the following information:
Click this link to open the Guardian Service Request Wizard for creating service request archive based on this signature. For details, see
Service Request Wizard. For instructions on using this wizard, see
Creating a Service Request Archive in Tasks.
|
Right-click on a signature title in the Detected Signatures table to open a context menu with the following options:
This opens the Filters Wizard, for specifying which signatures to include in signature displays. For details, see
Filters Wizard. For instructions, see Filter Signatures in
Tasks.
|
|
Manage Annotations: Select this to open the Annotations Wizard. For details, see
Annotations Wizard. For instructions on using this wizard, see
Signature Annotations of Tasks.
|
The Evaluation Summary Source tab page displays the XML source for the selected Evaluation Summary. This page also has a context menu of options for saving, copying, and printing the inventory XML source.
Right-click in the Source page to display a context menu with the following options:
The Evaluation Summary Report page displays all of the information contained in the Evaluation Summary Overview page, in a printer friendly format. This page also has a system menu of options for exporting, printing, creating a desktop shortcut for the page, adding the inventory to your favorites list, and other file operations. Right-click anywhere in the Report page to display this menu. Some options may not be applicable in this context.
The Text Compare View enables you to view two Domain Inventories or two Evaluation Summaries, side-by-side. You can compare inventories or evaluations from the same or different domains. Both objects must be of the same type—that is, two inventories or two evaluations. You cannot compare an inventory against an evaluation.
To display the Text Compare View, do the following:
Click on the first item to select it, and then hold down the Ctrl key and click to select the second item.
This opens the Text Compare View in the Document Pane. The differences between the two files are highlighted, and related segments are shown in boxed sections, with connectors indicating the relation.
The Text Compare navigation controls are as follows:
Right-click in the left or right Text Compare View panel to display the Text Compare context menu. This menu has the following options:
The Signature View displays some basic descriptive and target information for a selected signature. For information on viewing the entire contents of a signature, see Evaluation Summary View.
Double-click on a signature entry in the Signature Explorer or Bundle Explorer to display this View.
The Signature View contains the following tabs:
The following sections describe the contents of each of these tab pages.
The Signature View Overview tab page displays some basic descriptive and target information for the signature. For information on viewing the entire contents of a signature, see Evaluation Summary View.
The Signature View Overview page contains the following sections:
The Signature View Source tab page displays the complete XML source for the selected signature. This page also has a context menu of options for saving, copying, and printing the inventory XML source.
Right-click in the Source page to display a context menu with the following options:
The Signature View Report page displays all of the information contained in the Signature View Overview page, in a printer friendly format. This page also has a system menu of options for exporting, printing, creating a desktop shortcut for the page, adding the inventory to your favorites list, and other file operations. Right-click anywhere in the Report page to display this menu. Some options may not be applicable in this context.
The Document Pane Signature Bundle View displays a description and some additional details about the selected Signature Bundle. This also includes the Signature Definition for the Bundle, which determines which signatures are included in the Bundle.
To open the Signature Bundle View, double-click on a Bundle Node in the Bundle Explorer.
The Signature Bundle View has the following tabs:
The following sections describe the contents of each of these tab pages.
The Signature Bundle View Overview page displays a description and some additional details about the selected Signature Bundle.
The Overview page contains the following sections:
The Signature Bundle View Report page displays all of the information contained in the Signature Bundle View Overview page, in a printer friendly format. This page also has a system menu of options for exporting, printing, creating a desktop shortcut for the page, adding the inventory to your favorites list, and other file operations. Right-click anywhere in the Report page to display this menu. Some options may not be applicable in this context.
The Active Domains Table is a Document View for managing the domains currently activated in Guardian.
You can use either of the following methods to open the Active Domains Table:
The Active Domains Table contains the following information for each active domain:
By default, the domains are listed alphabetically by domain name. Click a column heading to sort the table entries according to the sort order for that column. Click a column heading again to alternate between ascending or descending order.
The Active Domains Table toolbar contains the following buttons:
Note: | You must select an entry in the table to activate the buttons. |
This opens an Oracle WebLogic Server Administration Console in your default Web browser. If you selected the Remember username/password checkbox when activating or modifying the domain, the browser will automatically log you into the Administration Console. If not, the browser will start at the Administration Console login page.
|
|
This opens the Domain Properties dialog box, which enables you to configure how Guardian accesses the domain, and to configure the Max Agent Threads and Agent Thread Timeout parameters. For instructions, see
Modify Domain Properties in Tasks.
|
|
This invokes the Domain Deactivation Wizard for deactivating the selected domain. For instructions, see
Deactivate Domain in Tasks.
|
The Shortcuts Table is a Document Pane View for viewing and managing the Evaluation Shortcuts you have created.
Note: | For a description of Evaluation Shortcuts, see Shortcut in About Oracle Guardian. For instructions on creating Evaluation Shortcuts, see Create Shortcut in Tasks. |
To open the Shortcuts Table, go to the Main Menu Bar and select Window > Show View > Shortcuts Table.
The Shortcuts Table contains the following information for each Shortcut:
By default, the Shortcuts are listed alphabetically by Shortcut name. Clicking a column heading sorts the Shortcuts according to the sort order for that column. For example, clicking the Domain column orders the Shortcuts alphabetically by domain name. Clicking the same column heading in succession alternates between ascending and descending order.
The Shortcuts Table toolbar contains the following buttons:
The Preferences page enables you to customize your Oracle Guardian environment.
You can use either of the following methods to open the Preferences page:
Preference parameters are organized into primary and secondary categories, or pages. The left pane of the Preferences page contains a Navigation Tree listing these pages, in hierarchical order. Click on a category title in the tree to display that page. For instructions on setting Preferences, see Preferences in Tasks.
The following table provides an overview of the Preferences pages.
Oracle Guardian provides the several wizards for guiding you through some of the more common or complex Guardian tasks.
The following table describes the Guardian wizards and how to invoke them.
Right-click on a signature title in the Signature Explorer or Bundle Explorer and select Annotations from the context menu. This opens a submenu with a single option, Manage Annotations. Select this to open the Annotations Wizard. This contains fields and options for annotating the selected signature. For details, see
Annotations Wizard. For instructions on using this wizard, see
Signature Annotations of Tasks.
|
|
Right-click in the Domain Explorer and select Evaluate Bundle from the context menu. This opens a submenu listing the Bundles available for evaluation. Select a Bundle to open the Bundle Evaluation Wizard for that Bundle. For details, see
Bundle Evaluation Wizard
. For instructions on using this wizard, see
Evaluate Bundles in
Tasks.
|
|
This contains fields and options for configuring and activating a domain in Guardian. Click Activate to open the Domain Activation Wizard. For details, see
Domain Activation Wizard
. For instructions on using this wizard, see
Activate Domain in
Tasks.
|
|
In Domain Explorer, right-click on a domain entry and select Deactivate Domain from the context menu to open this wizard. This contains a table of all active domains. For details, see
Domain Deactivation Wizard
. For instructions on using this wizard, see
Deactivate Domain in
Tasks.
|
|
Click Evaluate to open the Evaluation Wizard for evaluating one or more domains. For details, see
Evaluation Wizard
. For instructions on using this wizard, see
Evaluate Domain in
Tasks.
|
|
Click the Signature Explorer menu icon and select the Filters menu option. The Filters Wizard enables you to specify which signatures to display in Signature Lists.
For details, see
Filters Wizard
. For instructions on using this wizard, see
Filter Signatures in
Tasks.
|
|
Click Inventory to open the Inventory Wizard. A Domain Inventory is a snapshot of all of the configuration details for a domain as it exists at that moment. For details, see
Inventory Wizard
. For instructions on using this wizard, see
Inventory Domain in
Tasks.
|
|
Select File > New > Shortcut to open the Shortcut Wizard for creating and modifying Shortcuts. For details, see
Shortcut Wizard
. For instructions on using this wizard, see
Create Shortcut in
Tasks.
|
|
Click the Shortcut Explorer tab to open the Shortcut Explorer. Then, double-click on a Shortcut name in the Shortcut list to open the Shortcut Evaluation Wizard. For details, see
Shortcut Evaluation Wizard
. For instructions on using this wizard, see
Evaluate Shortcut in
Tasks.
|
|
Select a signature in an Evaluation Summary and click Get more help from Oracle Support. This opens the Service Request Wizard for the selected signature. This enables you to create a service request archive based on the selected signature. For details, see
Service Request Wizard
. For instructions on using this wizard, see
Creating a Service Request Archive in
Tasks.
|
|
Click Update to open the Update Wizard. This wizard enables you to automatically download new Oracle Guardian software and signatures from the Oracle Guardian update site. For details, see
Update Wizard
. For instructions on using this wizard, see in
Tasks.
WARNING: Upgrading from Guardian 1.0.x to Guardian 1.1 must be done manually. For instructions, see
Manually Update Guardian and
Manually Update Guardian Registry in
Tasks.
|
Right-click a wizard titlebar to open a context menu of options to Move, Size, or Close the wizard. You can also move or resize a Wizard by dragging the titlebar or window borders.
Use the Annotations Wizard to create an annotation for a selected signature.
To open the Annotations Wizard, first navigate to a signature list containing the signature you want to annotate. Then right-click on the signature title and select Annotations > Manage Annotations from the context menu.
For instructions on using this wizard, see Signature Annotations in Tasks.
The Annotations Wizard contains the following elements:
This contains a list of the annotations that exist for the selected signature. For a description of Annotations table contents, see
Annotations Table.
|
|||
Click Add to open the Add Annotation dialog box for creating a new annotation for this signature. For instructions, see
Annotate Signature in
Tasks.
|
|||
Click Edit to open the Edit Annotation dialog box for creating a new annotation for this signature. For instructions, see
Edit Annotation in
Tasks.
|
|||
|
The Annotations Wizard contains an Annotations table listing the annotations that exist for the selected signature.
The Annotations table contains the following information for each annotation in the list:
Use the Bundle Evaluation Wizard to preselect a domain and Bundle for Evaluation, and then initiate the evaluation.
To open the Bundle Evaluation Wizard, do the following:
This opens a submenu containing a list of Bundles available for evaluation.
The Bundle Evaluation Wizard opens with the selected domain and Bundle preselected, just as if you had invoked a Shortcut.
For instructions on using this wizard, see Evaluate Bundles in Tasks.
The Bundles Evaluation Wizard contains the following sections and fields:
This lists the currently active domains available to evaluate. The table contains the following fields:
|
|
Use the Domain Activations Wizard to activate a domain in Guardian.
You can use any of the following methods to open the wizard:
For complete instructions on using this wizard, see Activate Domain in Tasks.
Note: | Oracle recommends using SSL encryption for communication between the client and the Guardian Agent. Guardian uses 128 bit open source encryption for SSL. However, the configuration on the server for the domain determines whether or not Guardian will use 128 bit SSL encryption when activating that domain. |
The Domain Activation Wizard contains the following tabs:
These are described in the following sections.
The General tab contains the following fields:
|
|||
The Advanced tab contains the following fields and options:
Select this if a proxy server is to be used to access the target domain. Then, select a proxy server from the drop-down list. Click Add Proxy Servers to add proxy servers to this list. For complete instructions, see
Add Inbound Proxy Servers in Tasks.
|
|
You can use either of the following methods to open the Domain Deactivation Wizard:
Select a domain and click Finish to deactivate the domain.
Caution: | You will not be prompted to confirm the deactivate operation. The domain will be deactivated immediately. |
For complete instructions on using this wizard, see Deactivate Domain in Tasks.
The Domain Deactivation Wizard contains the following fields:
Use the Evaluation Wizard to evaluate a domain. You can select one or more domains for evaluation.
You can use any of the following methods to select a domain and open the wizard:
For complete instructions on using this wizard, see Evaluate Domain in Tasks.
The Evaluation Wizard contains the following fields:
This lists the currently active domains available to evaluate. The table contains the following fields:
|
|
Use the Filters Wizard to specify which signatures to display in signature lists.
You can use either of the following methods to open the wizard:
For complete instructions on using this wizard, see Filter Signatures in Tasks.
The Filters Wizard contains the following sections and fields:
Filter annotated signatures according to Annotation Type. This section contains the following options:
The default is Hide signatures with an Annotation Type of Ignore. For more information on Annotation Types, see
Signature Annotations in About Oracle Guardian.
|
|
Filter annotated signatures according to Annotation Name. This section contains the following options:
|
|
Use the Inventory Wizard to inventory a domain.
You can use any of the following methods to open the wizard:
For a description of Domain Inventories, see Domain Inventory in About Oracle Guardian. For instructions on using the Domain Inventory Wizard, see Inventory Domain of Tasks.
The Inventory Wizard contains the following sections and fields:
This lists the currently active domains available to inventory. The table contains the following fields:
|
|
Use the Shortcut Wizard to create an Evaluation Shortcut.
You can use any of the following methods to open the wizard:
For a description of Shortcuts, see Shortcut in About Oracle Guardian. For instructions, see Create Shortcut in Tasks.
The Shortcut Wizard contains the following sections and fields:
This lists the currently active domains available to evaluate. The table contains the following fields:
|
|
Use the Shortcut Evaluation Wizard to evaluate a selected Shortcut.
You can use any of the following methods to open the wizard:
For a description of Shortcuts, see Shortcut in About Oracle Guardian. For instructions, see Evaluate Shortcut in Tasks.
The Shortcut Evaluation Wizard contains the following sections and fields:
This lists the currently active domains available to evaluate. The table contains the following fields:
|
|
This is a drop-down menu for selecting the Bundle to be used for this evaluation. Right-click the Bundle entry for a domain in the Available Domains table to display a list of the available Bundles. You can change the Bundle selection, but only for the current evaluation. The Bundle for that Shortcut will remain unchanged for future invocations of the Shortcut Evaluation Wizard.
|
|
You can use the Service Request Wizard to create a service request archive based on a detected signature, which can be submitted to Oracle Customer Support at your convenience.
To open the Service Request Wizard, do the following:
Double-click on an Evaluation Summary entry in the Domain Explorer.
Click on a signature entry to highlight it. This displays the Description and Remedy for the signature in the bottom portion of the Evaluation Summary View in the Document Pane.
For a description of a Guardian Service Request Archive, see Support Service Request in About Oracle Guardian. For instructions on using the wizard, see Creating a Service Request Archive in Tasks.
The Service Request Wizard presents a series of pages that guide you through the service request creation process. These pages are as follows:
|
|||
Use the Update Wizard to update your Guardian software and signature Bundles.
You can use either of the following methods to open the wizard:
For a description of this feature, see Update Guardian in About Oracle Guardian. For instructions on using the wizard, see Automatically Update Guardian in Tasks.
The Update Wizard presents a series of pages that guide you through the update process. The following table describes each of these pages.
The Oracle Guardian log files contain information that Oracle Customer Support can use to diagnose and resolve issues with your Guardian system.
The Guardian log files are as follows:
This is located in the Guardian installation directory you specified during installation. This file contains information about each evaluation performed, including entries for all detected signatures. You can also use a command line script to automatically scan the
signature.log for detected signatures, and to automatically receive notifications when new signatures are detected.
|
|
The Guardian Command Line Interface (CLI)—also referred to as Guardian Headless Mode—is a set of Guardian commands that can be issued directly from the operating system command prompt. There is a Guardian CLI command for each of the most common tasks you can perform using the Guardian User Interface.
The Guardian command interpreter is an executable .cmd
batch file for Windows, and a .sh
shell script for Linux. Both the Windows batch file and the Linux shell script are wrappers that accumulate and organize arguments to the Java
command.
For instructions on starting and using the Command Line Interface, see Command Line Interface in Tasks.
The following are some guidelines for using the Command Line Interface. For complete instructions on using the CLI commands, see Command Line Interface in Tasks.
-g
with no trailing space, as shown in the following example:
guardianHeadless.cmd -glistActiveDomains
stdout
and stderr
. On Windows, command output is written to the following output file:The output file is created in your current directory, and is overwritten each time you run a Guardian Headless Mode command. For instructions on redirecting this to a different file, see Redirecting Guardian CLI Command Output in Tasks.
The following section provides an overview of the Command Line Interface commands.
The following table provides a brief description of each of the Guardian Command Line Interface commands. For a detailed description and syntax for each command, see CLI Command Reference.
See Overview of CLI Commands for a detailed description of each of these commands.
This section describes the syntax, arguments, and usage for each of the Command Line Interface commands. For instructions on starting and using the Command Line Interface, see Command Line Interface in Tasks.
Activate the specified domain and return the domain identifier.
activateDomain -t
targetUrl-u
username-p
passwordpersistCredentials
[ -c] [ -data
workspaceDir] [ -x
proxy]
maxAgentThreads
[ -m] [ -o
agentThreadTimeoutSecs]
The arguments for this command are described in the following table:
Create a Shortcut for the specified domain and Bundle.
createShortcut -d
domainId[ -b
bundleId] [ -s
shortcutName]
workspaceDir
[ -data]
The arguments for this command are described in the following table:
Deactivate the specified domain.
deactivateDomain -d
domainId[ -l
deleteUserData] [ -data
workspaceDir]
The arguments for this command are described in the following table:
Delete the specified Shortcut.
deleteShortcut -s
shortcutName[ -data
workspaceDir]
The arguments for this command are described in the following table:
Evaluate the specified domain and Bundle. To see the results, open the Guardian User Interface and open the Domain Explorer > Evaluation History folder and select the evaluation. The results are displayed in the Evaluation Summary View in the Document Pane.
evaluateDomainBundle -d
domainId[ -b
bundleId]
username
[ -u-p
password] [ -c
persistCredentials] [ -data
workspaceDir]
The arguments for this command are described in the following table:
Evaluate the domain and Bundle associated with the specified Shortcut. To see the results, open the Guardian User Interface and open the Domain Explorer > Evaluation History folder and select the evaluation. The results are displayed in the Evaluation Summary View in the Document Pane.
evaluateShortcut -s
shortcutName[ -u
username-p
password]
persistCredentials
[ -c] [ -data
workspaceDir]
The arguments for this command are described in the following table:
Display the list of commands and command syntax.
There are no arguments for this command.
Inventory the specified domain. To see the results, open the Guardian User Interface and open the Domain Explorer > Inventory History folder and select the inventory. The results are displayed in the Domain Inventory View in the Document Pane.
inventoryDomain -d
domainId[ -u
username-p
password]
The arguments for this command are described in the following table:
List the active domains in domain identifier format.
listActiveDomains [ -data
workspaceDir]
The arguments for this command are described in the following table:
List the Bundle identifier and Bundle name for each of the available Signature Bundles.
listBundles [ -data
workspaceDir]
The arguments for this command are described in the following table:
List the Shortcuts available for evaluation.
listShortcuts [ -data workspaceDir ]
The arguments for this command are described in the following table:
Execute the commands contained in the specified script file.
script -f
scriptname[ -data
workspaceDir]
The arguments for this command are described in the following table:
This is the name of a script file containing Guardian commands. Each command must be on a separate line. For instructions, see
Run Scripts in Tasks.
|
|