Monitoring Audit Logs - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Monitoring CMS Logs
Level. Select a message category that represents the level of logging to filter
messages. For more information, see "Log Levels (Message Categories)" on
page 748.
Filename. Select the log file you want to view. Choose Current to view the
currently active error log file. For more information, see "Log File Naming
Conventions" on page 750.
Click Refresh.
5.
The table displays the error log entries. The entries are in reverse chronological
order, with the most current log placed at the top. Use the scroll arrows on the
right edge of the panel to scroll through the log entries.
For each entry you see the following details:
Source. Indicates CMS component or resource that logged the message.
Level. Indicates the severity of the corresponding entry (explained in
Table 23-3 on page 748).
Date. Indicates the date on which the entry was logged.
Time. Indicates the time at which the entry was logged.
Details. Provides a brief description of the log.
To view an entry in its entirety, either double-click it or select the entry and
6.
click View.

Monitoring Audit Logs

Certificate Management System maintains audit trails for all events—certificate
requests, certificate renewal and revocation requests, CRL publication, and so on.
These trails enable you to detect any unauthorized access or activity. The audit
trails are logged and maintained in a file in your local file system.
If you have installed Certificate Management System on a Windows NT system,
you can also configure the server to log audit messages to Windows NT event log.
For details, see "Logging to Windows NT Event Log" on page 767.
NOTE
764 Netscape Certificate Management System Installation and Setup Guide • March 2002
You should periodically examine and audit the CMS audit log for
unusual activity. When examining the log, note in particular the log
entries that fall under the Security-Related Events category (these
are labeled Security).