User Manual

Security Event Logging
11-25
11.7.1 Setting the Destination
In order to use logging, the SCS must be configured to send logging information to one of the following
destinations:
◆ A TCP/IP host running syslog
◆ SCS memory
◆ The SCS serial console port, typically port 1
◆ A file stored locally on the SCS. The default disk location is /ram.
To specify the logging destination, use the Set/Define LoggingDestination command. A colon must be
appended to the IP address or IP host name.
Figure 11-49: Specifying Logging Destination
Note: The complete syntax of Set/Define Logging is given on page 12-174.
To see logging information that is stored in the SCS memory, enter the Show/Monitor/List Logging
Memory command. The following command will display the log and update the display continuously.
Figure 11-50: Displaying Logging Saved to Memory
11.7.2 Logging Levels
The following table lists the different areas that can be logged and the logging options available for each
area:
Local>> DEFINE LOGGING DESTINATION CONSOLE
Local>> DEFINE LOGGING DESTINATION 192.0.1.5:1
Local>> DEFINE LOGGING DESTINATION MEMORY
Local>> DEFINE LOGGING DESTINATION FILE syslog
Local>> MONITOR LOGGING MEMORY
Table 11-2: Events Logged by the SCS
To Log Events
Associated With:
The Following Options are Available:
(Numbers Reflect Logging Level)
Authentication 1 System Problems
2 Failures and Successes
3 All Logins and Logouts
4 Incorrect Passwords
5 All Passwords, and RADIUS Warnings
Commands Enabled
Disabled
Dialback 1 Problems