HP Intelligent Management Center v5.1 TACACS+ Authentication Manager Administrator Guide

114
Exporting authorization logs
The authorization log export function allows operators to get a list of authorization logs to be exported
through the query function, and then export all authorization logs in the authorization log list to an export
file.
To export authorization logs:
1. Click the User tab.
2. Select Device User View > Log Management > AuthZ Logs from the navigation tree.
The Authorization Log List displays all authorization logs.
3. Filter the authorization logs through basic query or advanced query.
For more information about querying authorization logs, see "Querying authorization logs."
4. Select a target File Format, TXT (text file) or CSV (CSV file).
Windows uses Excel to open CSV files by default. Excel automatically adjusts the display format
according to the contents. For example, 123456789123456789 will be displayed as
1.23457E+17 (scientific notation). In this case, you can select to display the data in text format.
5. Select a Separator for the text file.
Available options include Space, Tab, comma (,), colon (:), pound sign (#) and dollar sign ($). This
parameter is available when you select TXT for File Format.
6. Click OK.
This process may take a few minutes or longer, depending on the amount of authorization logs to
be exported.
After export, the operation result pages show the total number of exported logs and the number of
failures. If failure exists, click Download to download or view the reasons for failure in the
operation log.
7. Click Back to return to Authorization Log List.
8. (Optional) To view the operation result the last export operation, click Last Export Result.
Managing audit logs
Audit logs record user login/logoff and user online behaviors.
Audit logs fall into the following types:
• Audit start log—TAM records an audit start log when a user logs in to a device.
• Audit end log—TAM records an audit end log when a user logs off a device.
• Audit update log—TAM records an audit update log when receiving a watchdog packets from the
device. Watchdog packets are periodically sent by the device to TAM to declare that it is still online.
• Enter-command-at-CLI log—TAM records an enter-command-at-CLI log each time a device user
executes a command.
• Clear-online-data log—TAM records a clear-online-data log when an operator manually clears
online user information. For more information, see "
Configuring system operation log parameters."
• Age-online-data log—TAM records an age-online-data log when TAM clears aged online users
according to the Aging Time specified in the system parameter configuration.