HP Secure Key Manager - Manual (Page 241)

Description Component
Click to modify the properties. Edit
Click to remove the current properties. Clear
Click to test the LDAP connection after you have defined an LDAP server. LDAP Test
Viewing logs and statistics
The SKM maintains logs and statistics you can use to monitor your system's performance. The Log
Configuration and Log View pages enable you to configure log rotation schedules, syslog settings,
specify log levels, and view and download logs. The Statistics page enables you to view real-time
system, connection, and throughput information.
This chapter contains the following information:
• Logging Overview
• Log Configuration Page
• Statistics Page
Logging overview
The SKM maintains a variety of logs to record administrative actions, network activity, cryptography
requests, and more. You can schedule log rotations, configure the number of logs archived on the
SKM, stipulate the maximum log file size, and transfer logs to a log server.
The following logs are created:
• System Log – Contains a record of all system events, such as: service starts, stops, and restarts;
SNMP traps; hardware failures; successful or failed cluster replication and synchronization; failed
log transfers; and license errors.
• Audit Log – Contains a record of all configuration changes and user input errors made to the SKM,
whether through the Management Console or the CLI.
• Activity Log – Contains a record of each request received by the KMS Server.
• Client Event Log – Contains a record of all client requests containing the <RecordEventRequest>
element.
For each type of log, the current log entries are kept in a file named ‘Current'.
Log rotation
When a log file is rotated, the Current log file is closed and renamed with a timestamp. This renamed
file is then either stored in the log archive or transferred off of the SKM, depending on your
configuration. A new Current log file is then created.
Log rotation occurs according to a configured schedule. Rotation can also occur earlier, if the log file
grows to predetermined maximum size. You configure all of these parameters.
Your rotation schedule can be set to automatically rotate logs on a daily, weekly, or monthly basis,
at any time of day. The system maintains these settings for each log type; your Activity and Audit
logs, for example, can adhere to different schedules.
By specifying a maximum log file size, you can ensure that logs are rotated when they reach a certain
size, regardless of their rotation schedule.
Secure Key Manager 241