H3C Technologies H3C Intelligent Management Center - Manual (Page 115)

106
Querying authentication logs
TAM provides basic query and advanced query for authentication logs. Basic query criteria include
several key parameters for quick search. Advanced query offers various query criteria for precise match.
Basic query
To query authentication logs:
1. Click the User tab.
2. On the navigation tree, select Device User > Log Management > AuthN Logs.
The Authentication Log list displays all authentication logs.
3. On the upper-right side of the Query Authentication Logs area, click the Basic Query link.
You can perform a basic query if you see Advanced Query on the upper-right side of the Query
Authentication Logs area.
4. Enter or select one or more of the following query criteria:
{
Account Name—Enter a partial or complete account name of the device user.
{
Result—Select an authentication result. Options are: Succeeded and Failed.
{
Authentication Time From/To—Enter an authentication time range for a device user, in the
format YYYY-MM-DD hh:mm.
Select an authentication time range.
− Click the Calendar icon on the left. On the upper part of the window that appears, select
the date, and on the lower part, enter the time. The date and time determine the start time
of the authentication time range.
− Click the Calendar icon on the right. On the upper part of the window that appears,
select the date, and on the lower part, enter the time. The date and time determine the end
time of the authentication time range.
If you only specify the start time, the authentication time range is from the start time to
9999-01-01 00:00.
If you only specify the end time, the authentication time range is from 2000-01-01 00:00
to the end time.
If you select both the start time and end time, the authentication time range is from the start
time to the end time.
An empty field does not serve as a query criterion.
5. Click Query.
The Authentication Log list displays all authentication logs matching the query criteria. To clear the
query criteria, click Reset. The Authentication Log list displays all authentication logs.
Advanced query
To perform an advanced query:
1. Click the User tab.
2. On the navigation tree, select Device User > Log Management > AuthN Logs.
The Authentication Log list displays all authentication logs.
3. On the upper- right side of the Query Authentication Logs area, click the Advanced Query link.
You can perform an advanced query if you see Basic Query on the upper-right side of the Query
Authentication Logs area.