HP XP7 Command View Advanced Edition Administrator Guide (Web Version) (TK981-96004, May 2014)

11 HP XP7 Command View Advanced
Edition audit logs
This chapter describes the settings that are necessary for collecting audit log data for Device Manager
and Tiered Storage Manager, and the information that you can check in the audit log data.
Generating audit log files
In the HP XP7 Command View Advanced Edition products, user operations can be recorded in audit
logs to retain proof for auditors and evaluators of compliance with regulations, security evaluation
standards, and other business standards. To generate audit log data, you must edit the environment
settings file (auditlog.conf). For details on this file, see “Editing the audit log environment settings
file” on page 248.
For Windows, the audit log data is output to the event log files (application log files). For Linux, the
data is output to the syslog file.
The following table lists and describes the categories of audit log data that can be generated from
HP storage-related products.
Table 79 Categories and descriptions
DescriptionCategories
Events indicating starting or stopping of hardware or software:
• Starting or shutting down an OS
• Starting or stopping a hardware component (including micro com-
ponents)
• Starting or stopping software on a storage system or SVP, and HP
XP7 Command View Advanced Edition products
StartStop
Events indicating hardware or software failures:
• Hardware failures
• Software failures (memory error, etc.)
Failure
Events indicating link status among devices:
• Whether a link is up or down
LinkStatus
Events indicating communication results between HP storage-related
products and external services:
• Communication with an external server, such as NTP or DNS
• Communication with a management server (SNMP)
ExternalService
Administrator Guide (Web Version) 237