Viewing The Log File - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1 Administration Manual

Viewing the Log File

Step 1
Step 2
Step 3
Table 1-3 Logged Actions
Category
Sensor Device Extension
Backup and Recovery
License
To view the audit logs:
Log in to STRM Log Management as root.
Go to the following directory:
/var/log/audit
Open the desired audit log file.
Each entry in the log file displays using the following format:
Note: The maximum size of any audit message (not including date, time, and host
name) is 1024 characters.
<date_time> <host name> <user>@<IP address> (thread ID)
[<category>] [<sub-category>] [<action>] <payload>
Where:
QSTRM Log Management Administration Guide
Viewing STRM Log Management Audit Logs
Action
Adding an sensor device extension
Editing the sensor device extension
Deleting a sensor device extension
Uploading a sensor device extension
Uploading a sensor device extension
successfully
Downloading a sensor device extension
Reporting a sensor device extension
Modifying a sensor devices association to a
device or device type.
Editing the configuration
Initiating the backup
Completing the backup
Failing the backup
Deleting the backup
Synchronizing the backup
Cancelling the backup
Initiating the restore
Uploading a backup
Uploading an invalid backup
Deleting the backup
Adding a license key.
Editing a license key.
7