Define Parameters
Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional; the script uses the default values unless you explicitly define them. You can skip or define parameters depending on your execution scenario and security policies. See the Choose Appropriate Execution Scenario topic for additional information.
First, provide a path to your add-on followed by script parameters with their values. Each parameter is preceded with a dash; a space separates a parameter name from its value. You can skip some parameters— the script uses a default value unless you explicitly define one. If necessary, modify the parameters as required.
| Parameter or switch | Default value | Description |
|---|---|---|
| AWSSDKInstallPath | 'C:\Program Files (x86)\AWS SDK for .NET' | Assumes that AWS SDK for .NET is installed by its default path. To specify another location, provide a path in single quotes (e.g., 'C:\Program Files (x86)\My SDKs\AWS SDK for .NET'). |
| ImportAllEvents | — | By default, the add-on imports only events with processed details. To import all events, set the switch during the add-on execution. NOTE: Importing all events makes audit data less human-readable. |
| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer,WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). |
| NetwrixAuditorUserName | Current user credentials | By default, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the DOMAIN\username format. NOTE: The account must be assigned the Contributor role in Auditor. |
| NetwrixAuditorPassword | Current user credentials | By default, the script runs with the current user credentials. Provide a different password if necessary. |
| NetwrixAuditorPlan | — | By default, the add-on writes data to the Netwrix_ Auditor_API database and doesn't associate it with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, the add-on writes data to a database linked to that plan. NOTE: If you select a plan name in the add-on, create a dedicated plan in Auditor, add the Netwrix API data source to the plan, and enable the data source for monitoring. Otherwise, the add-on can't write data to the Audit Database. |
Update In-Script Parameters
Step 1 – Right-click a script and select Edit. Windows PowerShell ISE starts.
Step 2 – Navigate to the following lines:
$RegionEndpoint = "your AWS region endpoint"
$AccessKeyID = "your AWS access key ID"
$SecretAccessKey = "your AWS secret access key"
Step 3 – Update the following parameters:
| Parameter | Description |
|---|---|
| RegionEndpoint | Provide an endpoint for your region, e.g., us-east-1 (N. Virginia). NOTE: If you use more than one region in your environment, run the script several times with different region endpoints. See the AWS service endpoints article for additional information. |
| AccessKeyID | Provide an AWS access key ID for your account. The access key authenticates requests to the AWS SDK, CLIs, and API. |
| SecretAccessKey | Provide an AWS secret access key that works with your access key ID. |
Step 4 – Save the script.