Configuring Logs In The Console - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Chapter 3. Administrative Basics
• The age limit for the corresponding file is reached. The corresponding log file is equal to or older
than the interval specified by the rolloverInterval configuration parameter. The default value
for this parameter is 2592000 seconds (every thirty days).
When a log file is rotated, the old file is named using the name of the file with an appended time
stamp. The appended time stamp is an integer that indicates the date and time the corresponding
active log file was rotated. The date and time have the forms YYYYMMDD (year, month, day) and
HHMMSS (hour, minute, second).
Log files, especially the audit log file, contain critical information. Periodically archive rotated log files
to some archive media. Log files are archived by copying the entire /logs directory to an archive
medium.
NOTE
The Certificate System does not provide any tool or utility for archiving log files.
The Certificate System provides a command-line utility, signtool, that signs log files before archiving
them as a means of tamper detection. For details, see
Signing log files is an alternative to the signed audit logs feature. Signed audit logs creates audit logs
that are automatically signed; using signtool manually signs archived logs. See
"Signed Audit Log"
for details about signed audit logs.
By default, rotated log files are not deleted.

3.9.6. Configuring Logs in the Console

This procedure describes how to configure system, transaction, and audit logs.
To configure logs for a Certificate System instance:
1. Open the Console.
2. In the navigation tree of the Configuration tab, select Log.
The Log Event Listener Management tab lists the currently configured listeners.
3. To create a new log instance, click Add, and select a module plug-in from the list in the Select
Log Event Listener Plug-in Implementation window.
To delete a log instance, select a listener to delete in the Log Event Listener list. Click Delete.
To modify an existing log instance, select a listener to modify in the Log Event Listener list. Click
Edit/View.
4. Change the fields in the Log Event Listener Editor window.
• Log Event Listener ID . The unique name that identifies the listener. The names can have
any combination of letters (aA to zZ), digits (0 to 9), an underscore (_), and a hyphen (-), but it
cannot contain other characters or spaces.
• type . The type of log file. Set transaction to create a listener that records audit logs. For error
and system logs, select system.
82
Section 3.9.10, "Signing Log Files".
Section 3.9.1.6,