HP StorageWorks XP24000 Audit Log User and Reference Guide, v01 (AE131-96003, June 2007)

1 Introduction
This chapter introduces the audit logs created by the HP XP Remote Web Console or SVP (Service
Processor) on the storage system. The SVP is a computer that is contained within the storage system.
Users can access the audit logs that are output by the SVP, but the SVP itself is accessible only by HP
personnel.
This chapter includes the following sections:
• Purpose of Audit Logs, page 21
• Downloading Audit Log and Syslog Information File, page 21
• Transferring the Audit Log File to Syslog Servers, page 22
• Audit Log File Description, page 24
• Audit Log File Output, page 25
Purpose of Audit Logs
The audit log files store a history of all operations performed from an HP XP Remote Web Console
computer or an SVP. This history includes the user, the time of the operation, the name of the operation,
any parameters set, and the end result (normal completion or error message). Each audit log file ends
with a sequence number, from 0,000,000,000 to 4,294,967,295. When the number reaches
4,294,967,295, it resets and starts over at 0,000,000,000.
There are two types of audit log files:
• Audit Log Information File: Consists of basic and detailed information about settings made for
each operation. Items common to each audit log will appear as basic information. See
Audit Log Information File on page 27 and Chapter 3 on page 35 for details about the audit log
information file.
• Syslog Information File: Consists of information released to both the syslog and audit log information
file and information released only to the syslog information file. See Syslog Information File on page
29 for more information about the syslog information file. This file contains the audit log. You can
download it to your HP XP Remote Web Console computer or to a primary or secondary syslog
server.
The audit log is an important tool you can use to keep track of operations, to monitor security, to
investigate the cause of errors, and to avoid potential errors.
Downloading Audit Log and Syslog Information File
You can download the audit log information file by selecting the Audit button or the Syslog tab on
the HP XP Remote Web Console main window.
Using the Audit Button to Download the Audit Log Information File
To download the audit log information file using the Audit button:
1. Log on as a storage administrator and open the HP XP Remote Web Console main window.
XP24000 Audit Log User and Reference Guide 21