Export audit log files

System Administrator Guide for VSP One Block 85
Version
A0-05-4x
Audience
anonymous
Part Number
MK-26VSP1B030-03
ft:lastEdition
2026-06-22

The internal audit logs for the storage system include the ESM audit log and the DKC audit log. ESM audit logs are accumulated in both AMCs (AMC-0 and AMC-1). After you have exported the ESM audit log from the first AMC, log in to the other AMC and then export the ESM audit log from the other AMC.

Time difference: If you change to a different UTC time zone, depending on the timing, UTC time lag information in records for events that occurred before you changed the time zone can be time zone information after you changed the UTC time zone.

Location name: If you change the location identification name, depending on the timing, the location name in the records for events that occurred before the location name change can be the location name after you changed the location name.

  • Check to see if a dump is being performed. If so, wait until the dump download is complete, and then export the audit log. Exporting an audit log while downloading a dump can result in errors 30762-204720.
  1. Log in to the maintenance utility using the static IP address of AMC-0.
  2. In the Administration menu, select Audit Log Settings.
  3. To export the audit logs for AMC-0, click Export Audit Log and then select ESM or DKC.
  4. Read the information in the Information window, and then click OK.
    The export is done as a file download. When DKC is selected, it takes 2 to 3 minutes for the file download screen to appear.
    Important: When the white screen or security confirmation screen appears, wait until the export is complete and then close the white screen or security confirmation screen. If you close the white screen or security confirmation screen before the export is complete, the export might fail.
    Note: If the certificate is not valid during an HTTPS connection, the security warning message is displayed. Take the following action within 30 seconds:
    • Microsoft Edge: Click Advanced and then click Continue to <IP-address-or-host-name> (unsafe).
    • Google Chrome: Click Advanced, and then click Proceed to <IP-address> (unsafe).

    The audit logs cannot be exported after 30 seconds. If more than 30 seconds has elapsed, go back to step 2.

  5. When the file download screen appears, click Save As, navigate to the download location, and then click Save.
    Note:
    • If you change the location identification name of a syslog server, the location identification name on new audit logs could be changed retroactively.
    • If you change the UTC time zone setting of the storage system, the times recorded on new audit logs could be changed retroactively.
  6. Check the download progress.
    The file download time depends on network speed.

    Because the files are dynamically generated, the file size and file transfer completion target time are unknown or hidden.

  7. Confirm that the download is complete.
    If the white screen or security confirmation screen remains open, close it manually.
  8. Log out of the maintenance utility for AMC-0.
  9. Log in to the maintenance utility for AMC-1.
  10. Repeat steps 2 - 7 to export the audit log files for AMC-1.