Audit Log file description

Audit Log User Guide for VSP 5000 Series

Version
90-09-0x
Audience
anonymous
Part Number
MK-98RD9010-13

The following table describes the audit log file components:

Component

Audit Log File

Syslog File

File Type

Text format.

Auditlog information file 1

Auditlog information file 2

Files are compressed in tgz format.

Text format.

syslogYYYYMMDD.tgz stores syslog-svp.log (audit log file for SVP) and syslog-dkc.log (audit log file for DKC).

Downloaded File Name

AuditYYYYMMDD.tgz

where

YYYY = year

MM = month

DD = day

The file name can be changed when downloading.

syslogYYYYMMDD.tgz

where

YYYY = year

MM = month

DD = day

The file name can be changed when downloading.

File Name Transferred to the FTP Server

When the file is automatically transferred:

Audit-SVPSSSSSYYYYMMDDHHMMSS.tgz or Audit-DKCSSSSSYYYYMMDDHHMMSS.tgz

When the file is manually transferred:

AuditSSSSSYYYYMMDDHHMMSS.tgz

where

SSSSS = serial number

YYYYMMDD = date of the transfer

HHMMSS = hour (HH), minute (MM) and second (SS) of the transfer

The output folder must be specified in the FTP tab on the Edit Audit log Settings window.

N/A

Linefeed Codes

CR + LF

The standard linefeed codes for Windows. Some text editors cannot display these codes correctly.

LF

The standard linefeed code for UNIX. Some text editors cannot display this code correctly.

File Output

Contains login and logout information as well as basic and detailed information about settings made for each option.

  • Basic information consists of information common to each audit log.
  • Detailed information consists of information about the operations of each executed option. This includes an index representing each item and its values.

Contains the same information as released to the audit log file. However the output format differs between the audit log file and syslog file. (some items are output to the syslog file only.)

Maximum Line Size

1,024 bytes

1,024 bytes

Maximum Number of Lines

250,000 lines

250,000 lines

Maximum Size of Files

122.5 MB

488.2 MB

When Reaching the Maximum Number of Lines

The newest data overwrites the oldest data (wrap around).

is shown on the Device Manager - Storage Navigator main window.

The newest data overwrites the oldest data (wrap around).

Also, the following log is output in the syslog file.

  • [AuditLog], Over MaxLine

Threshold of the Maximum Number of Lines and When Reaching Threshold

The threshold value is 70% (175,000 lines) of the maximum number of lines.

  • If the audit log information reaches the threshold, a warning message urging you to download the audit log file appears when you log in Device Manager - Storage Navigator. Also, is shown on the Device Manager - Storage Navigator main window.
  • If you set to transfer files to an FTP server, the audit log file will be automatically transferred to the FTP server when the information stored in the audit log file reaches the threshold.
  • After you download or transfer the audit log file, the counter is reset and monitoring will start from 0% again.

The threshold value is 70% (175,000 lines) of the maximum number of lines.

When the audit log information reaches the threshold, the following log is output in the syslog file.

  • [AuditLog], Over Threshold

If this log is output, download the file as necessary before old information is overwritten. After you download the file, the counter is reset and monitoring will start from 0% again.