12 collecting audit log data – HP Hitachi Dynamic Link Manager Software User Manual

Page 68

Advertising
background image

2. HDLM Functions

44

2.12 Collecting Audit Log Data

HDLM and other Hitachi storage-related products provide an audit log function so that

compliance with regulations, security evaluation standards, and industry-specific

standards can be shown to auditors and evaluators. The following table describes the

categories of audit log data that Hitachi storage-related products can collect.

Table 2-10: Categories of Audit Log Data that Can Be Collected

Category

Explanation

StartStop

An event indicating the startup or termination of hardware or software,
including:

OS startup and termination
Startup and termination of hardware components (including

micro-program)

Startup and termination of software running on storage systems, software

running on SVPs (service processors), and Hitachi Command Suite
products

Failure

An abnormal hardware or software event, including:

Hardware errors
Software errors (such as memory errors)

LinkStatus

An event indicating the linkage status between devices:

Link up or link down

ExternalService

An event indicating the result of communication between a Hitachi

storage-related product and an external service, including:

Communication with a RADIUS server, LDAP server, NTP server, or

DNS server,

Communication with the management server (SNMP)

Authentication

An event indicating that a connection or authentication attempt made by a

device, administrator, or end-user has succeeded or failed, including:

FC login
Device authentication (FC-SP authentication, iSCSI login authentication,

or SSL server/client authentication)

Administrator or end-user authentication

AccessControl

An event indicating that a resource access attempt made by a device,

administrator, or end-user has succeeded or failed, including:

Device access control
Administrator or end-user access control

Advertising
This manual is related to the following products: