Requirements For Outputting Audit Log Data; Destination And Filtering Of Audit Log Data - Hitachi XP P9500 User Manual

The severity levels are as follows:
3: Error, 4: Warning, 6: Informational
#2
If you use Ctrl + C to cancel the DLMgetras utility for collecting HDLM
error information, audit log data indicating that the DLMgetras utility has
terminated will not be output.

Requirements for Outputting Audit Log Data

HDLM can output audit log data when all of the following conditions are
satisfied:
• The syslog daemon is active.
• The output of audit log data has been enabled by using the HDLM
command's set operation.
However, audit log data might still be output regardless of the above
conditions if, for example, an HDLM utility is executed from external media.
#:
The following audit log data is output:
¢
¢
¢
Notes:
¢
¢

Destination and Filtering of Audit Log Data

Audit log data is output to syslog. Because HDLM messages other than audit
log data are also output to syslog, we recommend that you specify the
output destination that is used exclusively for audit log data.
For example, to change the output destination of audit log data to /usr/
local/audlog, specify the following two settings:
• Specify the following setting in the /etc/syslog.conf file:
local0.info /usr/local/audlog
2-36
Categories: StartStop, Authentication, and ConfigurationAccess
Severity: 6 (Critical, Error, Warning, or Informational)
Destination: syslog (facility value: user)
You might need to perform operations such as changing the log size
and backing up and saving collected log data, because the amount of
audit log data might be quite large.
If the severity specified by the HDLM command's set operation differs
from the severity specified by the configuration file /etc/
syslog.conf, the higher severity level is used for outputting audit log
data.
HDLM Functions
Hitachi Dynamic Link Manager User Guide (for Solaris(R))
#