Storing Audit Logs - HP StorageWorks P9000 Reference Manual

If the log is not received by the syslog server, check whether the IP address and the port number
set matches with the IP address and the port number of the syslog server. If the IP address and the
port number match, check the syslog server setting. See the user's manual of the syslog server for
the details of the syslog server setting.

Storing audit logs

When storing audit logs, you can temporarily store them on a system disk before storing the logs
in the SVP, or store audit logs directly in the SVP. To prevent possible loss of the audit logs if the
SVP fails, HP recommends that you temporarily store audit logs to a system disk before storing the
logs to the SVP.
If you transfer audit logs directly to an SVP and the SVP has failed, the audit logs might be lost
because the SVP cannot receive the transferred audit logs. Temporarily storing audit logs to a
system disk can reduce the risk of losing them. The audit logs store to the system disk will be
eventually stored to the SVP.
Prerequisites
You must have Audit Log Administrator Role (Reference and Modification operation) privileges
to store audit logs.
A system disk must be created before you temporarily store an audit log to the SVP via the
system disk.
To configure how to store audit logs:
1. Open the Remote Web Console main window.
2. Click Settings Security Audit Log Setting. The Audit Log Setting window appears.
3. Click
4. Select one of the following to set the audit log storage method.
Enable to temporarily store audit logs in a system disk before storing the logs in the SVP.
Disable to store audit logs directly in the SVP.
5. Click Apply.
26 Using audit logs
to change to Modify mode.