H3C Technologies H3C Intelligent Management Center - Manual (Page 133)

117
Viewing online audit log details
1. Click the User tab.
2. From the navigation tree, select Access User View > Log Management > Internet Access Audit Log.
The Online Audit List displays all online audit logs.
3. Click the Details icon for an online audit log to view detailed information.
The page displays detailed information about the online audit log with the following parameters:
{
Account Name—Account name used by the online user to access the Internet.
{
User Name—Name of the IMC Platform user with which the access user account is associated.
{
Service Name—Name of the service used by the online user.
{
User Group—User group to which the online user belongs.
{
Start Time (Server)—Logging start time recorded by the EAD server.
{
End Time (Server)—Logging end time recorded by the EAD server, which is the time when the
EAD server received the log.
{
Start Time (Client)—Logging start time recorded by the iNode client.
{
End Time (Client)—Logging end time recorded by the iNode client.
{
Destination IP—Destination IP address the online user accessed.
{
Source IP—Source IP address used by the online user.
{
Destination Port—Destination port accessed by the online user.
{
Protocol Number—Number of the transport layer protocol used by the online user. Common
transport layer protocol numbers include 1 (ICMP), 6 (TCP), and 17 (UDP).
{
NIC Name—Name of the NIC used by the online user to access the Internet.
{
MAC Address—MAC address used by the online user to access the Internet.
{
Packet Number—Total number of packets sent by the user that match the ACL rule whose
Enable Audit is set to Audit.
4. Click Back to return to the online audit log List.
Viewing the offline audit log list
1. Click the User tab.
2. From the navigation tree, select User Access Log > Internet Access Audit Log.
3. Click the Offline Audit tab.
The Offline Audit List displays all offline audit logs.
Offline Audit List contents
{
Account Name—Account name of the user to pass identity authentication by the enterprise
network.
{
User Name—Name of the IMC Platform user associated with the access user account.
{
MAC Address—MAC address used by the PC to access the Internet.
{
Monitor Time—Time when the iNode client generated the ping success record.
{
Reachable IP—IP address that can be pinged by the iNode client.