SMU615 overview
events and changes in the merging unit. Both audit trail events and process related
events can be examined and analyzed in a consistent method with the help of Event
List in WHMI and Event Viewer in PCM600.
The merging unit stores 2048 audit trail events to the nonvolatile audit trail.
Additionally, 1024 process events are stored in a nonvolatile event list. Both the
audit trail and event list work according to the FIFO principle. Nonvolatile memory
is based on a memory type which does not need battery backup nor regular
component change to maintain the memory storage.
Audit trail events related to user authorization (login, logout, violation remote and
violation local) are defined according to the selected set of requirements from IEEE
1686. The logging is based on predefined user names or user categories. The user
audit trail events are accessible with IEC 61850-8-1, PCM600 and WHMI.
Table 3: Audit trail events
Audit trail event
Configuration change
Firmware change
Firmware change fail
Attached to retrofit test
case
Removed from retrofit test
case
Control remote
Test on
Test off
Reset trips
Time change
View audit log
Login
Logout
Password change
Firmware reset
Audit overflow
Violation remote
Violation local
24
Description
Configuration files changed
Firmware changed
Firmware change failed
Unit has been attached to retrofit case
Removed from retrofit test case
DPC object control remote
Test mode on
Test mode off
Reset latched trips (TRPPTRC*)
Time changed directly by the user. Note that this is not used
when the merging unit is synchronised properly by the appro-
priate protocol (IEEE 1588 v2).
Administrator accessed audit trail
Successful login from IEC 61850-8-1 (MMS), WHMI or FTP.
Successful logout from IEC 61850-8-1 (MMS), WHMI or FTP.
Password changed
Reset issued by user or tool
Too many audit events in the time period
Unsuccessful login attempt from IEC 61850-8-1 (MMS), WHMI or
FTP.
Unsuccessful login attempt from IEC 61850-8-1 (MMS), WHMI or
FTP.
1MRS758407 C
SMU615
Technical Manual