Audit log, Enabling audit log, Saving an audit log – Xerox WorkCentre 6400 User Manual

Page 79: Interpreting the audit log

Advertising
background image

Security

WorkCentre 6400 Multifunction Printer

System Administrator Guide

79

Audit Log

When the Audit Log feature is enabled, the printer begins recording events that happen on the printer.
You can download the Audit Log as a tab-delimited text file, and review it to find security breaches and
assess the printer’s security.

Enabling Audit Log

Notes:

Secure HTTP (SSL) must be enabled before you can enable Audit Log. For details, see

Enabling Secure HTTP (SSL)

on page 65.

If your printer is locked, you must log in as a system administrator. For details, see

Accessing CentreWare IS

on page 17.

1.

In CentreWare IS, click Properties > Security > Audit Log.

2.

Click Enabled under Enabling Audit Log on machine.

3.

Click Apply.

Saving an Audit Log

Note:

If your printer is locked, you must log in as a system administrator. For details, see

Accessing

CentreWare IS

on page 17.

1.

In CentreWare IS, click Properties > Security > Audit Log.

2.

Click Save.

3.

Right-click the Download Log link and save the compressed auditfile.txt.gz file to your computer.

4.

Extract the Auditfile.txt text file, and open it in a spreadsheet application that can read a tab-
delimited text file.

Interpreting the Audit Log

The Audit Log is formatted into ten columns

Index: Column 1 lists a unique value that identifies the event.

Date: Column 2 lists the date that the event happened in mm/dd/yy format.

Time: Column 3 lists the time that the event happened in hh:mm:ss format.

Event ID: Column 4 lists the type of event. The number corresponds to a unique description. For
details, see

Audit Log Event Identification Numbers

on page 174.

Event Description: Column 5 lists an abbreviated description of the type of event. For details, see

Audit Log Event Identification Numbers

on page 174.

Notes:

One audit log entry is recorded for each network destination within a Workflow Scanning
scan job.

For Server Fax jobs: One audit log entry is recorded for each Server Fax job.

For Email jobs: One audit log entry is recorded for each SMTP recipient within the job.

Advertising