CAS Status

By default, the functions described in this topic are available to the admin user, and users with the admin role. Open the Administrator portal and locate the Local Taps section of the Administration Console. If there is no Local Taps section, the unit type setting for this Guardium appliance needs to be changed. See the description of the store unit type command in the Configuration and Control CLI Commands topic for instructions on how to enable the Local Taps menu.

To monitor CAS status, select CAS Status in the Local Taps section of the Administration Console to open the Change Audit System Status panel.

For each database server where CAS is installed and running, and where this Guardium appliance is configured as the active Guardium host, this panel displays the CAS status, and the status of each CAS instance configured for that database server.

Regarding the sets of status lights on the Change Audit System Status panel: when you hover the mouse over a set of status lights, a pop-up text box displays the current status. If you have trouble distinguishing the colors on your monitor, for all status light sets, the left-most light is always red, the right-most light is green, and on sets of three lights, the middle light is yellow.

Change Audit System Status Panel

Component	Description
	On the top row only of the panel, displays the CAS status on the Guardium appliance. Red: CAS is not running on this Guardium appliance. Green: CAS is active on this Guardium appliance.
	For each CAS host where this Guardium appliance is the active Guardium host, the status lights indicate whether CAS is connected: Red: Host and/or the CAS agent is offline or unreachable. Green: Host and CAS agent are online.
(Reset)	Reset the CAS agent on this monitored system. This stops and restarts the CAS agent on the database server.
(Remove)	Remove this monitored system from CAS. Click this button to remove all CAS information for this monitored system from the Guardium internal database. This button is disabled if the CAS agent is running on this system. You must stop the CAS agent to use this button. See Stopping and Starting the CAS Agent, below.
	Each set of lights indicates the status of a CAS instance on the monitored system. If the owning monitored system status is red (indicating that the CAS agent is offline), ignore this set of status lights. Red: The instance is disabled. Green: The instance is enabled and online, and its configuration is synchronized with the Guardium appliance configuration. Yellow: The instance is enabled, but the instance configuration on the Guardium appliance does not match the instance configuration on the monitored system (it has been updated on the Guardium appliance, but that update has not been applied on the monitored system).
Refresh	Click the Refresh button to re-check the status of all servers in the list. This button does not stop and/or restart CAS on a database server – it only checks the connection between CAS on the Guardium appliance and CAS on each database server.

Stopping and Starting the CAS Agent

There are several situations where you may need to stop or start the CAS agent on a monitored system. Follow the procedures outlined below.

Note: If all you want to do is stop and restart the CAS agent, you can do that from the Administrator Console of the Guardium appliance, using Reset button - see above.

Stopping CAS on a Unix Host

Edit the file /etc/inittab.
Find the CAS respawn line:

cas:2345:respawn:/usr/local/guardium/guard_stap/cas/bin/run_wrapper.sh /usr/local/guardium/guard_stap/cas/bin

Comment out the line by inserting the # (pound sign) character in the first character position.
Save the file.
Enter the following command:

init -q

Enter the following command:

ps -ef | grep wrapper

Note the PID of each of the processes listed.
For each of the processes listed, issue the following command:

kill -9 <pid>

In the Change Audit System Status panel of the Guardium administrator portal, the status light for this CAS host should be red, and the Remove button should be enabled (which allows you to remove data from this CAS host from the Guardium appliance internal database).

Starting CAS on a Unix Host

Use this procedure to restart the CAS agent only when it has been stopped by editing the /etc/inittab file as described above.

Edit the file /etc/inittab.
Find the line:

#cas:2345:respawn:/usr/local/guardium/guard_stap/cas/bin/run_wrapper.sh /usr/local/guardium/guard_stap/cas/bin

Uncomment the line by removing the # (pound sign) character in the first character position.
Save the file.
Enter the following command to restart the CAS agent:

init -q

Starting and Stopping CAS on a Windows Host

On Windows CAS runs as a System Service.

In the Services panel, highlight the Change Audit System Client item.
Select either Start or Stop from the Action menu.