Audit Log; Figure 96 Audit Log - Fujitsu ETERNUS DX S5 Series Design Manual

4. NAS Functions

Audit Log

Audit Log
Audit logs are audit trail information that record operations that are executed for the ETERNUS DX and the
response from the system. This information is required for auditing. The number of files for saving the audit logs
can be specified. For details about the setting, refer to "Audit Log Setup" in "Configuration/Operation Guide
(NAS)".
The audit log function enables monitoring of all operations and any unauthorized access that may affect the
system.
Only audit logs for CIFS access can be acquired in NAS environments. Audit logs for NFS access cannot be
acquired.
For each shared folder that is to be accessed, an audit log file is output to the expanded system volume in the
ETERNUS DX. FTP is used to acquire the audit log file that is output.
For details about the audit log messages, refer to "Audit Log Messages" in "Configuration/Operation Guide
(NAS)".
Figure 96 Audit Log
Client
LAN
Port
NIC-CA
■
File Format of the Audit Log
The audit log information is output to files by shared folder and date in the expanded system volumes. In
addition, file names are created according to the following naming rule.
audit_shared folder name_controller number.log-yyyymmdd
For example, if the shared folder name is "shareA", the connection destination controller is "CM#0", the
acquisition date is "2019/08/20", then the file name is "audit_shareA_0.log-20190820".
However, writing the date in the file name on the day of the audit log collection is not allowed.
When the user account for the audit log FTP is used to log in, the audit log files can be referenced from the
directory that stores the audit logs under the home directory.
Client
LAN
Perform operations
Port
CM#0
Output and save
the audit log to a file
ETERNUS DX
Port Port
NIC-CA
CM#1
Expanded SYSVOL
196
Analyze/Investigate
Acquire files
using FTP
Design Guide