ABB Relion SMU615 Technical Manual page 28

Section 2
SMU615 overview
22
Table 3: Audit trail events
Audit trail event
Configuration change
Firmware change
Firmware change fail
Attached to retrofit test case
Removed from retrofit test case
Control remote
Test on
Test off
Reset trips
Time change
View audit log
Login
Logout
Password change
Firmware reset
Audit overflow
Violation remote
Violation local
PCM600 Event Viewer can be used to view the audit trail events and process related
events. Audit trail events are visible through dedicated Security events view. Since
only the administrator has the right to read audit trail, authorization must be used in
PCM600. The audit trail cannot be reset, but PCM600 Event Viewer can filter data.
Audit trail events can be configured to be visible also in WHMI Event list together
with process related events.
To expose the audit trail events through Event list, define the
Authority logging level parameter via Configuration/
Authorization/Security. This exposes audit trail events to all users.
Table 4: Comparison of authority logging levels
Audit trail event
Configuration change
Firmware change
Table continues on next page
Description
Configuration files changed
Firmware changed
Firmware change failed
Unit has been attached to retrofit case
Removed from retrofit test case
DPC object control remote
Test mode on
Test mode off
Reset latched trips (TRPPTRC*)
Time changed directly by the user. Note that this is not used
when the merging unit is synchronised properly by the
appropriate protocol (IEEE 1588 v2).
Administrator accessed audit trail
Successful login from IEC 61850-8-1 (MMS), WHMI or FTP.
Successful logout from IEC 61850-8-1 (MMS), WHMI or FTP.
Password changed
Reset issued by user or tool
Too many audit events in the time period
Unsuccessful login attempt from IEC 61850-8-1 (MMS),
WHMI or FTP.
Unsuccessful login attempt from IEC 61850-8-1 (MMS),
WHMI or FTP.
Authority logging level
Configuration
None
change
●
●
1MRS758407 B
Settings edit All
● ●
● ●
SMU615
Technical Manual