HP StorageWorks XP Audit Log reference guide for the XP12000/XP10000 and SVS 200 (5697-7157, November 2007)

Description of the audit log file
The audit log file includes the following components:
Table 2 Audit log file components
Syslog information
file
Settings audit log fileLogin audit log fileComponent
syslog.logaudit.loglogin.logFile name
syslogYYYYMMDD.tgzAuditYYYYMMDD.tgzAuditYYYYMMDD.tgzDownloaded
file name
YYYY = yearYYYY = yearYYYY = year
MM = monthMM = monthMM = month
DD = dayDD = dayDD = day
–AuditSSSSSYYYYMMDDHHMMSS.tgzAuditSSSSSYYYYMMDDHHMMSS.tgzFile name
when
SSSSS = serial numberSSSSS = serial number
transferred to
the FTP
server
YYYYMMDD = date of the transfer
HHMMSS = hour (HH), minute (MM)
and second (SS) of the transfer
YYYYMMDD = date of the transfer
HHMMSS = hour (HH), minute (MM)
and second (SS) of the transfer
The output folder needs to be specified
in the Audit Log pane.
The output folder needs to be specified
in the Audit Log pane.
LFCR + LF (Some text editors cannot display these codes correctly)Linefeed
codes
Information about
operations on your
Basic and detailed information about
settings made for each operation
Login and logout informationFile output
service processor (SVP),
including priority and
host name, as well as
audit log information
1,024 bytes256 bytes256 bytesMaximum
line size
120,000250,00010,000Maximum
number of
lines
117.3 MB61.5 MB2.5 MBMaximum
File Size
Check Audit Log: Event
in the syslog audit log
file.
Once the information stored in the audit log information file reaches its maximum
capacity, the starting line of the oldest data begins to be overwritten with the
starting line of the newest data (wrap around). When you reach 70% of this
Threshold
threshold, the yellow Audit:Warning button displays on the XP Remote Web
[Audit Log], Over
Threshold: File has
Console main pane. You should download the audit log information file at or
before this threshold to prevent the old data from being overwritten. If an FTP
reached 50% of the
maximum number of
lines.
server is specified, the audit log information file will be transferred to the FTP
server when the information stored in the audit log information file reaches the
threshold. When the information stored in the audit log information file exceeds
[Audit Log], Over
MaxLine: Size of file
the maximum, and data is being overwritten, the red Audit:Wraparound button
displays. The counter is reset when you download or transfer the audit log
information file.
has reached its
XP Audit Log reference guide 33