User guide

8-31
Cisco Media Gateway Manager 5.0 User Guide
OL-5461-02
Chapter 8 Managing Security
How Do I Manage the Audit Log?
8.4 How Do I Manage the Audit Log?
The Audit Log table contains information about significant events (user-initiated changes and activities)
that occurred on the Cisco MGM server during a specified time period. By default, the Audit Log
displays information about significant events that occurred during the last four hours. You can change
the default time period in the User Preferences dialog box. Each record has a time stamp, record type,
and message string.
There are two types of audit log available in Cisco MGM:
Audit logs for the Diagnostic Center, Configuration Center, Statistics Reporting Tool and Chassis
View. These audit logs are accessed directly from the log directory on the server at /opt/svplus/log.
Audit logs for the other applications in Cisco MGM. Choose Administration > Audit Log to view
these Audit logs.
Audit Log data can be filtered, see section 8.4.2 Filtering Audit Log Data, page 8-32.
The Audit Log records the following runtime-affecting operations for monitoring purposes:
Cisco MGM client logins, logouts, and security violations (including successful/unsuccessful client
user logins and forced logouts)
NE or group location changes in the Domain Explorer tree
Domain Explorer group operations (add, delete, or modify a group)
Changes in the Domain Explorer properties of an NE
NE Service, PM Service, and Cisco MGM GateWay Service start or stop operations
Cisco MGM user administration (add, delete, or modify user profile)
Changes in:
UI properties
Security settings
High availability settings
Recovery settings
Database configuration
Error log configuration
NE autobackup parameters
NE service parameters
Job or task cancellation in the Job Monitor table
Manual memory backup
Memory restore
Software download
OSS profile changes (CORBA)
Cisco MGM GateWay/CORBA client logins/logouts
The following topics are covered:
8.4.1 Viewing the Audit Log
8.4.2 Filtering Audit Log Data