HP StorageWorks XP Audit Log reference guide: HP XP12000 Disk Array, HP XP10000 Disk Array, HP 200 Storage Virtualization System (5697-8004, March 2009)

itself with plugging into this infrastructure and then transmitting the log events. In addition to the syslog
server, audit log also allows you to maintain a duplicate copy of the log inside the hard disk of the
SVP as a backup.
In the storage system, a log message is output to the audit log in two types of cases:
• A configuration change that is made either from an XP Remote Web Console computer or the
SVP.
• Powering up and shutting down the storage system.
The following figure illustrates those functions:
Figure 2 Functions that generate audit log output
Purpose of audit logs
The audit log is an important tool you can use to keep track of operations, monitor security, investigate
the cause of errors, and avoid potential errors.
The audit log files store a history of all operations performed from an XP Remote Web Console
computer. This history includes the following:
• Name of user
• Time of the operation
• Name of the operation
• Any parameters that were set
• The end result (normal completion or error message)
The audit log file ends with a sequence number from 000,000 to 999,999. When the number reaches
999,999, it resets and starts over at 000,000.
Downloading the audit log file
The audit log file may be downloaded to an XP Remote Web Console computer by clicking the Audit
button or the Syslog tab on the XP Remote Web Console's main pane.
Using the Audit button
To download the audit log file using the Audit button:
XP Audit Log reference guide 23