Reference Guide

62 Brocade Fabric OS Command Reference

53-1004112-02

auditCfg

Modifies and displays the audit log filter configuration.

Synopsis auditcfg --class audit_class

auditcfg --enable | --disable

auditcfg --severity severity_level

auditcfg --show

Description Use this command to configure the audit logging and to display the audit log configuration. This command allows

you to set filters by configuring certain classes, to add or remove any of the classes in the filter list, to set severity

levels for audit messages, and to enable or disable audit filters. Based on the configuration, certain classes are

logged to syslog for auditing. Syslog configuration is required for logging audit messages. Use the syslogAdmin

command to add the syslogd server IP address.

Notes The RAS class is not configurable; its function is to audit the audit log management operations and it is always

enabled internally.

The execution of this command is subject to Virtual Fabric restrictions that may be in place. Refer to "Using Fabric

OS Commands" and "Command Availability" for details.

Operands This command has the following operands:

--class

Configures filters for a specified audit class. To add or remove any of the classes in the filter

list, reissue the --class option.

audit_class

Specifies the filters to be configured. Valid values are: 1-ZONE, 2-SECURITY,

3-CONFIGURATION, 4-FIRMWARE, 5-FABRIC, 7-LS (Logical Switch), 8-CLI, and

9-MAPS. The filter is specified by its numeric value. To add more than one filter, the

numeric values must be separated by commas. Spaces are not permitted. This operand is

required.

--severity

Sets audit severity level to a specified value. When severity is set, only log messages of type

severity_level and higher are displayed. You cannot enter multiple severity levels.

severity_level

Valid values are INFO, WARNING, ERROR, and CRITICAL. By default, all messages are

logged. This operand is required.

--enable

Enables all filters. This action enables an existing configuration; it does not change the

configuration.

--disable

Disables all filters.This action disables an existing configuration; it does not change the

configuration.