Configuring Logs In The Cs.cfg File - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

expirationTime. Type, in seconds, the age limit for deleting the rotated log files. The
default value is 0 seconds, which indicates that the rotated log files should not be
deleted. If you provide a value, the rotated log will be deleted from your system after
that time has elapsed. This is no longer supported. Logs will not be deleted, you
cannot set a time for the automatic deletion of logs.
The signed audit log has these additional settings:
logSigning. Set to true to enable signed logging; set to false to disable signed logging.
When you enable this parameter, you must also provide a value for the
signedAuditCertNickname
only be viewed by an auditor. See "Signed Audit Log," on page 257 for more
information about signed audit logs.
signedAuditCertNickname. The nickname of the certificate used to sign audit logs.
The private key for this certificate must be accessible to the subsystem in order for it to
sign the log.
events. Specifies which events will be logged to the audit log. Lists each event
separated by a comma with no spaces. You can remove events from the list. See Table
8-3 on page 269 for a complete list of auditable logging events.
Click OK.
5.
You are returned to the Log Event Listener Management tab.
Click Refresh.
6.

Configuring Logs in the CS.cfg File

To modify the configuration settings for logs:
Stop the CS instance.
1.
Open the file located in the directory
2.
CS.cfg
<server_root>/cert-<instance>/config
To create a new log, you copy all of the entries for either the system or transactions log.
3.
These are the parameters that begin with log.instance.Transactions or
log.instance.System
change the name of this instance by changing the word "Transactions" or "System" in
each parameter to the new name.
To configure a log instance, modify the parameters associated with that log. These
4.
parameters begin with
parameter. When this feature is enabled, this log can
. Paste all entries at the bottom of the logging section and
and include the following parameters:
log.instance
Chapter 8 Administrative Basics
Logs
263