Destination and filtering of audit log data, Destination and filtering of audit log data -39 – HP Hitachi Dynamic Link Manager Software Licenses User Manual

Page 61

Advertising
background image

¢

If the severity specified by the HDLM command's set operation differs

from the severity specified by the configuration file /etc/syslog.conf

or /etc/rsyslog.conf, the higher severity level is used for outputting

audit log data.

Destination and Filtering of Audit Log Data

Audit log data is output to syslog. Because HDLM messages other than audit

log data are also output to syslog, we recommend that you specify the

output destination that is used exclusively for audit log data.

For example, to change the output destination of audit log data to /usr/
local/audlog, specify the following two settings:

Specify the following setting in the /etc/syslog.conf or /etc/
rsyslog.conf file:

local0.info /usr/local/audlog

Use the HDLM command's set operation to specify local0 for the audit

log facility:

You can also filter the audit log output by specifying a severity level and type

for the HDLM command's set operation.

Filtering by severity:

The following table lists the severity levels that can be specified.

Table 2-10 Severity Levels That Can Be Specified

Severity

Audit log data to output

Correspondence with syslog

severity levels

0 None

Emergency

1

Alert

2 Critical

Critical

3 Critical and Error

Error

4 Critical, Error, and Warning

Warning

5

Notice

6 Critical, Error, Warning, and Informational

Informational

7

Debug

Filtering by category:

The following categories can be specified:

¢

StartStop

¢

Authentication

¢

ConfigurationAccess

HDLM Functions

2-39

Hitachi Dynamic Link Manager (for Solaris) User Guide

Advertising
This manual is related to the following products: