HP StorageWorks XP Remote Web Console Software - Manual (Page 12)

Overview of Audit Logs
The Audit Log function allows you to record the access and configuration changes made to your
storage system. The audit log can be used to investigate when an incorrect setup is performed or
when a problem occurs in the storage system.
You can view the audit log by one of the following methods:
•
Transferring the audit log to FTP servers
•
Transferring the audit log to syslog servers
•
Downloading the audit log to the Remote Web Console computer
You can download two files with different formats to the Remote Web Console computer. The file
that has the same format as the audit log transferred to syslog servers is called the syslog file. The
file that has the same format as the audit log transferred to FTP servers is called the audit log file.
Figure 2 (page 12) shows an overview of the audit log transfer operations.
Figure 2 Overview of the Audit Log Transfer
You can transfer audit logs to FTP servers or syslog servers after connecting these servers through
the LAN to the SVP of the storage system. A maximum of two FTP servers and two syslog servers
can be connected to the SVP. The first one is named primary FTP server or primary syslog server.
The second one is named secondary FTP server or secondary syslog server.
The audit log is stored in the SVP. Older data in the file is deleted from the audit log file when the
number of lines of saved data reaches the maximum quantity.
•
If you configure the FTP server settings, the audit log will be automatically transferred to the
FTP server when the number of lines in the file reaches the threshold.
•
If you configure syslog server settings, the audit log will be always transferred to the syslog
server.
You can temporarily store the audit log on a system disk in a storage system before storing the log
in the SVP so that the unsaved audit log will not be lost. The audit log stored in the system disk will
be eventually stored in the SVP. If you need to keep track of commands sent from the host, HP
recommends that you temporarily store the audit log on a system disk before storing the logs in
the SVP.
To transfer the audit log to servers, configure server settings using the Syslog window or the Audit
Log Transfer window. To store the audit log on a system disk, configure the setting using the Audit
Log Setting window. See the HP XP24000/XP20000 Audit Log User and Reference Guide to
configure server settings in each window.
12 About Remote Web Console Operations