Destination And Filtering Of Audit Log Data - Hitachi XP P9500 User Manual

Destination and Filtering of Audit Log Data

Audit log data is output to syslog. Because HDLM messages other than audit
log data are also output to syslog, we recommend that you specify the
output destination that is used exclusively for audit log data.
For example, to change the output destination of audit log data to /usr/
local/audlog, specify the following two settings:
• Specify the following setting in the /etc/syslog.conf file:
local0.info /usr/local/audlog
• Use the HDLM command's set operation to specify local0 for the audit
log facility:
You can also filter the audit log output by specifying a severity level and type
for the HDLM command's set operation.
Filtering by severity:
The following table lists the severity levels that can be specified.
Severity
0
1
2
3
4
5
6
7
Filtering by category:
The following categories can be specified:
¢
¢
¢
¢
For details on how to specify audit log settings, see
Functions on page
Table 2-12 Severity Levels That Can Be Specified
Audit log data to output
None
Critical
Critical and Error
Critical, Error, and Warning
Critical, Error, Warning, and Informational
StartStop
Authentication
ConfigurationAccess
All of the above
3-184.
HDLM Functions
Hitachi Dynamic Link Manager User Guide (for Linux(R))
Correspondence with syslog
severity levels
Emergency
Alert
Critical
Error
Warning
Notice
Informational
Debug
Setting Up the HDLM
2-41