Change Guardian collects events from various assets based on pre-configured Change Guardian policies. Events are collected by Change Guardian agents and are received by the Change Guardian server and displayed in the Dashboard.
By default, events are stored in the server temporarily, based on the data retention value. However, you can chose to store all or specified event data to a syslog server or in another Change Guardian server or a Sentinel server.
This chapter provides information about managing events by setting the event destination other than the Change Guardian server, setting event routing rules based on set filters, create event tags, storing events for long-term retention.